CVE-2005-1918

The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that…

published February 21, 2006

CVSS
—
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02930 · 87.0th percentile
Published
2006-02-21T19:00Z
EPSS history
Timeline
  • 21 FEB 19:00Z
    The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that…
    cvelistv5