CVE-2007-4131
EPSS 11.4%tar
發布日:2007/8/25修改日:2026/4/28
描述
Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.
受影響套件(2)
- Debian/tarfrom 0, < 1.18-2
- Debian/tarfrom 0, < 1.16-2etch1