Red Hat Security AdvisoryRHSA-2010:0505
perl-Archive-Tar security update
Released 2010-07-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) perl-Archive-Tar-1:1.39.1-1.el5_5.1
- Red Hat Enterprise Linux AS version 4 perl-Archive-Tar-1.39.1-1.el4_8.1
- Red Hat Enterprise Linux Desktop (v. 5 client) perl-Archive-Tar-1:1.39.1-1.el5_5.1
- Red Hat Enterprise Linux Desktop version 4 perl-Archive-Tar-1.39.1-1.el4_8.1
- Red Hat Enterprise Linux ES version 4 perl-Archive-Tar-1.39.1-1.el4_8.1
- Red Hat Enterprise Linux WS version 4 perl-Archive-Tar-1.39.1-1.el4_8.1
Fixes 1 record
Priority LOW 37
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04287 · Published 2007-11-02 · Fixed CWE-22
