NVD

Id
56265  
Name
CVE-2007-4134  
Description
Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-08-30  
Modified Date
2010-08-21  
Seq
2007-4134  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
286564 56265 CVE-2007-4134 ftp://ftp.berlios.de/pub/star/alpha/AN-1.5a84  View
286565 56265 CVE-2007-4134 20070901-01-P  View
286566 56265 CVE-2007-4134 http://bugs.gentoo.org/show_bug.cgi?id=189690  View
286567 56265 CVE-2007-4134 oval:org.mitre.oval:def:11098  View
286568 56265 CVE-2007-4134 1018646  View
286569 56265 CVE-2007-4134 http://support.avaya.com/elmodocs2/security/ASA-2007-414.htm  View
286570 56265 CVE-2007-4134 GLSA-200710-23  View
286571 56265 CVE-2007-4134 FEDORA-2007-1852  View
286572 56265 CVE-2007-4134 RHSA-2007:0873  View
286573 56265 CVE-2007-4134 20070907 FLEA-2007-0051-1 star  View
286574 56265 CVE-2007-4134 https://bugs.gentoo.org/show_bug.cgi?id=189690  View
286575 56265 CVE-2007-4134 https://issues.rpath.com/browse/RPL-1669  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52002 JVNDB-2007-000665 star の extract.c におけるディレクトリトラバーサルの脆弱性 star の extract.c には TAR アーカイブ中のディレクトリのシンボリックリンクにおいて「//..」文字列の取り扱いに不備があり、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-4134 27489 CVE-2007-4134 56265 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000665.html 2007-08-30 2007-11-28 View