Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (dot dot) in a crafted tar file.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2014-02-20T16:00:00
Updated: 2014-02-20T13:57:00
Reserved: 2013-06-12T00:00:00
Link: CVE-2013-4420
JSON object: View
NVD Information
Status : Analyzed
Published: 2014-02-20T16:55:05.250
Modified: 2014-02-20T23:51:29.797
Link: CVE-2013-4420
JSON object: View
Redhat Information
No data.
CWE