Red Hat Security AdvisoryRHSA-2006:0749
tar security update
Released 2006-12-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 tar-1.13.25-15.RHEL3, tar-1.13.25-15.RHEL3.i386
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 tar-1.13.25-6.AS21.1, tar-1.13.25-6.AS21.1.i386, tar-1.13.25-6.AS21.1.ia64
- Red Hat Enterprise Linux AS version 3 tar-1.13.25-15.RHEL3, tar-1.13.25-15.RHEL3.i386, tar-1.13.25-15.RHEL3.ia64 +1
- Red Hat Enterprise Linux AS version 4 tar-1.14-12.RHEL4, tar-1.14-12.RHEL4.i386, tar-1.14-12.RHEL4.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 tar-1.14-12.RHEL4, tar-1.14-12.RHEL4.i386
- Red Hat Enterprise Linux ES version 2.1 tar-1.13.25-6.AS21.1, tar-1.13.25-6.AS21.1.i386
- Red Hat Enterprise Linux ES version 3 tar-1.13.25-15.RHEL3, tar-1.13.25-15.RHEL3.i386, tar-1.13.25-15.RHEL3.ia64
- Red Hat Enterprise Linux ES version 4 tar-1.14-12.RHEL4, tar-1.14-12.RHEL4.i386, tar-1.14-12.RHEL4.ia64
- Red Hat Enterprise Linux WS version 2.1 tar-1.13.25-6.AS21.1, tar-1.13.25-6.AS21.1.i386
- Red Hat Enterprise Linux WS version 3 tar-1.13.25-15.RHEL3, tar-1.13.25-15.RHEL3.i386, tar-1.13.25-15.RHEL3.ia64
- Red Hat Enterprise Linux WS version 4 tar-1.14-12.RHEL4, tar-1.14-12.RHEL4.i386, tar-1.14-12.RHEL4.ia64
- Red Hat Linux Advanced Workstation 2.1 tar-1.13.25-6.AS21.1, tar-1.13.25-6.AS21.1.ia64
Fixes 1 record
Priority LOW 32
GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.11691 · Published 2006-11-24 · Fixed
