NVD

Id
67636  
Name
CVE-2005-1918  
Description
The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2005-12-31  
Modified Date
2010-08-21  
Seq
2005-1918  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
350031 67636 CVE-2005-1918 20060301-01-U  View
350032 67636 CVE-2005-1918 oval:org.mitre.oval:def:9946  View
350033 67636 CVE-2005-1918 1015655  View
350034 67636 CVE-2005-1918 http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm  View
350035 67636 CVE-2005-1918 SUSE-SR:2006:005  View
350036 67636 CVE-2005-1918 RHSA-2006:0195  View
350037 67636 CVE-2005-1918 FLSA:183571-1  View
350038 67636 CVE-2005-1918 5834  View
350039 67636 CVE-2005-1918 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57919 JVNDB-2006-000115 GNU tar における不完全なパッチ処理によるディレクトリトラバーサルの脆弱性 GNU tar のディレクトリトラバーサルの問題 (CVE-2002-0399) を解消するパッチには、アーカイブの解凍処理における最適化が適切に行われない不備のため、依然としてディレクトリトラバーサル攻撃を受ける脆弱性が存在します。 CVE-2005-1918 13122 CVE-2005-1918 67636 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000115.html 2006-02-21 2007-07-30 View