CVE-2006-6097

GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES…

published November 24, 2006

CVSS
—
EPSS
11%
Percentile
95.9
In the wild
Unconfirmed
What it is

GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11011 · 95.9th percentile
Published
2006-11-24T18:00Z
EPSS history
Timeline
  • 24 NOV 18:00Z
    GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES…
    cvelistv5