Red Hat Security Advisory

RHSA-2007:0860

tar security update

Released 2007-08-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) tar-2:1.15.1-23.0.1.el5, tar-2:1.15.1-23.0.1.el5.i386, tar-2:1.15.1-23.0.1.el5.ia64 +1
Red Hat Enterprise Linux AS version 4 tar-1.14-12.5.1.RHEL4, tar-1.14-12.5.1.RHEL4.i386, tar-1.14-12.5.1.RHEL4.ia64 +1
Red Hat Enterprise Linux Desktop (v. 5 client) tar-2:1.15.1-23.0.1.el5, tar-2:1.15.1-23.0.1.el5.i386
Red Hat Enterprise Linux Desktop version 4 tar-1.14-12.5.1.RHEL4, tar-1.14-12.5.1.RHEL4.i386
Red Hat Enterprise Linux ES version 4 tar-1.14-12.5.1.RHEL4, tar-1.14-12.5.1.RHEL4.i386, tar-1.14-12.5.1.RHEL4.ia64
Red Hat Enterprise Linux WS version 4 tar-1.14-12.5.1.RHEL4, tar-1.14-12.5.1.RHEL4.i386, tar-1.14-12.5.1.RHEL4.ia64

Fixes 1 record

TI-2007-03999 CVE-2007-4131 · GHSA-43w6-q9mv-9cwf

Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU…

LOW 35

Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02743 Published 2007-08-25 Fixed