Red Hat Security AdvisoryRHSA-2006:0232
tar security update
Released 2006-03-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 tar-1.14-9.RHEL4, tar-1.14-9.RHEL4.i386, tar-1.14-9.RHEL4.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 tar-1.14-9.RHEL4, tar-1.14-9.RHEL4.i386
- Red Hat Enterprise Linux ES version 4 tar-1.14-9.RHEL4, tar-1.14-9.RHEL4.i386, tar-1.14-9.RHEL4.ia64
- Red Hat Enterprise Linux WS version 4 tar-1.14-9.RHEL4, tar-1.14-9.RHEL4.i386, tar-1.14-9.RHEL4.ia64
Fixes 1 record
Priority LOW 31
Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.05178 · Published 2006-02-24 · Fixed
