7.5

CVE-2016-6321

Exploit
Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name parameter, aka POINTYFEATHER.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnu ≫ Tar Version1.14
Gnu ≫ Tar Version1.15
Gnu ≫ Tar Version1.15.1
Gnu ≫ Tar Version1.15.90
Gnu ≫ Tar Version1.15.91
Gnu ≫ Tar Version1.16
Gnu ≫ Tar Version1.16.1
Gnu ≫ Tar Version1.17
Gnu ≫ Tar Version1.18
Gnu ≫ Tar Version1.19
Gnu ≫ Tar Version1.20
Gnu ≫ Tar Version1.21
Gnu ≫ Tar Version1.22
Gnu ≫ Tar Version1.23
Gnu ≫ Tar Version1.24
Gnu ≫ Tar Version1.25
Gnu ≫ Tar Version1.26
Gnu ≫ Tar Version1.27
Gnu ≫ Tar Version1.27.1
Gnu ≫ Tar Version1.28
Gnu ≫ Tar Version1.29
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 15.16% 0.963
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
http://git.savannah.gnu.org/cgit/tar.git/commit/?id=7340f67b9860ea0531c1450e5aa261c50f67165d
Patch
Issue Tracking
http://lists.gnu.org/archive/html/bug-tar/2016-10/msg00016.html
Vendor Advisory
Mailing List
http://packetstormsecurity.com/files/139370/GNU-tar-1.29-Extract-Pathname-Bypass.html
Third Party Advisory
Exploit
VDB Entry
http://seclists.org/fulldisclosure/2016/Oct/102
Patch
Third Party Advisory
Mailing List
http://seclists.org/fulldisclosure/2016/Oct/96
Third Party Advisory
Mailing List
http://www.debian.org/security/2016/dsa-3702
http://www.securityfocus.com/bid/93937
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-3132-1
https://security.gentoo.org/glsa/201611-19
https://sintonen.fi/advisories/tar-extract-pathname-bypass.proper.txt
Third Party Advisory