CVE-2007-4134

Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.

published August 30, 2007

CVSS
—
EPSS
3%
Percentile
87.2
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03009 · 87.2th percentile
Published
2007-08-30T22:00Z
EPSS history
Timeline
  • 30 AUG 22:00Z
    Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.
    cvelistv5