GNU tar contains_dot_dot() Directory Traversal Bug Lets Remote Users Overwrite Files
|
|
SecurityTracker Alert ID: 1018599 |
|
SecurityTracker URL: http://securitytracker.com/id?1018599
|
|
CVE Reference:
CVE-2007-4131
(Links to External Site)
|
Date: Aug 23 2007
|
Impact:
Modification of user information
|
Fix Available: Yes Vendor Confirmed: Yes
|
|
Description:
A vulnerability was reported in GNU tar. A remote user can cause files to be overwritten on the target user's system.
A remote user can create a specially crafted tar archive that, when extracted by the target user, will overwrite arbitrary files on the target user's system with the privileges of the target user.
The vulnerability resides in the contains_dot_dot() function and occurs in the processing of directory symlinks.
Dmitry V. Levin reported this vulnerability.
|
Impact:
A remote user can create a file that, when loaded by the target user, will overwrite files on the target user's system with the privileges of the target user.
|
Solution:
A source code fix is available via CVS.
|
Vendor URL: www.gnu.org/software/tar (Links to External Site)
|
Cause:
Input validation error
|
Underlying OS:
Linux (Any), UNIX (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Thu, 23 Aug 2007 12:11:01 -0400
Subject: GNU tar
|
contains_dot_dot()
CVE-2007-4131
|
|
