Red Hat Security AdvisoryRHSA-2006:0195
tar security update
Released 2006-02-21 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 tar-1.13.25-14.RHEL3, tar-1.13.25-14.RHEL3.i386
- Red Hat Enterprise Linux AS version 3 tar-1.13.25-14.RHEL3, tar-1.13.25-14.RHEL3.i386, tar-1.13.25-14.RHEL3.ia64 +1
- Red Hat Enterprise Linux ES version 3 tar-1.13.25-14.RHEL3, tar-1.13.25-14.RHEL3.i386, tar-1.13.25-14.RHEL3.ia64
- Red Hat Enterprise Linux WS version 3 tar-1.13.25-14.RHEL3, tar-1.13.25-14.RHEL3.i386, tar-1.13.25-14.RHEL3.ia64
Fixes 1 record
Priority LOW 19
The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files v…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.0293 · Published 2006-02-21 · Fixed CWE-22