NVD

Id
64658  
Name
CVE-2006-6097  
Description
GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-24  
Modified Date
2011-03-07  
Seq
2006-6097  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
337504 64658 CVE-2006-6097 20061202-01-P  View
337505 64658 CVE-2006-6097 http://docs.info.apple.com/article.html?artnum=305214  View
337506 64658 CVE-2006-6097 http://kb.vmware.com/KanisaPlatform/Publishing/817/2240267_f.SAL_Public.html  View
337507 64658 CVE-2006-6097 APPLE-SA-2007-03-13  View
337508 64658 CVE-2006-6097 20061121 GNU tar directory traversal  View
337509 64658 CVE-2006-6097 oval:org.mitre.oval:def:10963  View
337510 64658 CVE-2006-6097 RHSA-2006:0749  View
337511 64658 CVE-2006-6097 SA-06:26  View
337512 64658 CVE-2006-6097 GLSA-200612-10  View
337513 64658 CVE-2006-6097 1918  View
337514 64658 CVE-2006-6097 1017423  View
337515 64658 CVE-2006-6097 SSA:2006-335-01  View
337516 64658 CVE-2006-6097 http://support.avaya.com/elmodocs2/security/ASA-2007-015.htm  View
337517 64658 CVE-2006-6097 DSA-1223  View
337518 64658 CVE-2006-6097 MDKSA-2006:219  View
337519 64658 CVE-2006-6097 OpenPKG-SA-2006.038  View
337520 64658 CVE-2006-6097 20061201 rPSA-2006-0222-1 tar  View
337521 64658 CVE-2006-6097 20070330 VMSA-2007-0002 VMware ESX security updates  View
337522 64658 CVE-2006-6097 21235  View
337523 64658 CVE-2006-6097 2006-0068  View
337524 64658 CVE-2006-6097 USN-385-1  View
337525 64658 CVE-2006-6097 TA07-072A  View
337526 64658 CVE-2006-6097 http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html  View
337527 64658 CVE-2006-6097 ADV-2006-4717  View
337528 64658 CVE-2006-6097 ADV-2006-5102  View
337529 64658 CVE-2006-6097 ADV-2007-0930  View
337530 64658 CVE-2006-6097 ADV-2007-1171  View
337531 64658 CVE-2006-6097 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216937  View
337532 64658 CVE-2006-6097 https://issues.rpath.com/browse/RPL-821  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58589 JVNDB-2006-000785 GNU tar の GNUTYPE_NAMES レコード処理におけるシンボリックリンク攻撃を受ける脆弱性 GNU tar には、extract.c の extract_archive () 関数と、mangle.c の extract_mangle () 関数での GNUTYPE_NAMES レコードの処理に不備が存在するため、シンボリックリンク攻撃を受ける脆弱性が存在します。 CVE-2006-6097 22199 CVE-2006-6097 64658 4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000785.html 2006-11-21 2007-07-30 View