CVE

Id
27916  
CVE No.
CVE-2007-4559  
Status
Candidate  
Description
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.  
Phase
Assigned (20070827)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
287952 27916 CVE-2007-4559 MLIST:[python-dev] 20070824 tarfile and directory traversal vulnerability  View
287953 27916 CVE-2007-4559 URL:http://mail.python.org/pipermail/python-dev/2007-August/074290.html  View
287954 27916 CVE-2007-4559 MLIST:[python-dev] 20070825 tarfile and directory traversal vulnerability  View
287955 27916 CVE-2007-4559 URL:http://mail.python.org/pipermail/python-dev/2007-August/074292.html  View
287956 27916 CVE-2007-4559 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=263261  View
287957 27916 CVE-2007-4559 VUPEN:ADV-2007-3022  View
287958 27916 CVE-2007-4559 URL:http://www.vupen.com/english/advisories/2007/3022  View
287959 27916 CVE-2007-4559 SECUNIA:26623  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57346 JVNDB-2007-006038 Helix DNA Server の RTSP サービスにおけるヒープベースのバッファオーバーフローの脆弱性 Helix DNA Server の RTSP サービスには、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-4561 27916 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006038.html  View