CVE-2007-4131

EPSS 11.4%

tar

Published: 8/25/2007Modified: 4/28/2026

Description

Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.

Affected packages (2)

References (1)