NVD

Id
79405  
Name
CVE-2002-0399  
Description
Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary files during archive extraction via a (1) "/.." or (2) "./.." string, which removes the leading slash but leaves the "..", a variant of CVE-2001-1267.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-05  
Published
2002-10-10  
Modified Date
2016-10-17  
Seq
2002-0399  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
396249 79405 CVE-2002-0399 CLA-2002:538  View
396250 79405 CVE-2002-0399 20020928 GNU tar (Re: Allot Netenforcer problems, GNU TAR flaw)  View
396251 79405 CVE-2002-0399 47800  View
396252 79405 CVE-2002-0399 1000928  View
396253 79405 CVE-2002-0399 archive-extraction-directory-traversal(10224)  View
396254 79405 CVE-2002-0399 ESA-20021003-022  View
396255 79405 CVE-2002-0399 MDKSA-2002:066  View
396256 79405 CVE-2002-0399 SUSE-SR:2006:005  View
396257 79405 CVE-2002-0399 SUSE-SR:2007:019  View
396258 79405 CVE-2002-0399 RHSA-2002:096  View
396259 79405 CVE-2002-0399 20070825 rPSA-2007-0172-1 tar  View
396260 79405 CVE-2002-0399 20070827 FLEA-2007-0049-1 tar  View
396261 79405 CVE-2002-0399 5834  View
396262 79405 CVE-2002-0399 https://issues.rpath.com/browse/RPL-1631  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63789 JVNDB-2002-000116 Tar ユーティリティのアーカイブ抽出処理における (/.. ./..) 任意のファイルが上書きされる脆弱性 ------------ CVE-2002-0399 4791 CVE-2002-0399 79405 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000116.html 2002-05-20 2007-04-01 View