CVE-2007-4131

Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files…

published August 25, 2007

CVSS
—
EPSS
3%
Percentile
86.0
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02743 · 86.0th percentile
Published
2007-08-25T00:00Z
EPSS history
Timeline
  • 25 AUG 00:00Z
    Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files…
    cvelistv5