CVE-2001-1267

GNU tar < 1.13.19 - Directory Traversal via Dot-Dot Filename

Title source: llm

Description

Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot).

References (11)

Core 11

Core References

Vendor Advisory vendor-advisory x_refsource_sunalert

http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1

Patch, Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2002-096.html

Exploit, Patch, Vendor Advisory mailing-list x_refsource_bugtraq

http://online.securityfocus.com/archive/1/196445

Vendor Advisory vendor-advisory x_refsource_conectiva

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000538

Vendor Advisory vdb-entry x_refsource_xf

http://www.iss.net/security_center/static/10224.php

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2002-138.html

Various Sources vendor-advisory x_refsource_mandrake

http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:066

Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp

http://online.securityfocus.com/advisories/4514

Various Sources x_refsource_confirm

ftp://alpha.gnu.org/gnu/tar/tar-1.13.25.tar.gz

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2003-218.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/3024

Scores

EPSS 0.0013

EPSS Percentile 31.3%

Details

Status published

Products (1)

gnu/tar < 1.13.19

Published Jul 12, 2001

Tracked Since Feb 18, 2026