Gentoo: GLSA-202110-02 Normal: GNU Tar Archive Extraction Vulnerability
gentoo
September 16, 2007
A directory traversal vulnerability has been discovered in GNU Tar.
Summary
Gentoo Linux Security Advisory GLSA 200709-09
https://security.gentoo.org/
Severity: Normal
Title: GNU Tar: Directory traversal vulnerability
Date: September 15, 2007
Bugs: #189682
ID: 200709-09
Synopsis
=======
A directory traversal vulnerability has been discovered in GNU Tar.
Background
=========
The GNU Tar program provides the ability to create tar archives, as
well as various other kinds of manipulation.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 app-arch/tar < 1.18-r2 >= 1.18-r2
==========
Dmitry V. Levin discovered a directory traversal vulnerability in the
contains_dot_dot() function in file src/names.c.
Impact
=====
By enticing a user to ...
Resolution
References
Availability
style>.gentoo_availability{display:block;}
Concerns
PREVIOUS
NEXT
Background
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Affected Packages
Impact
Workaround
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!