Tardiff Project

Tardiff

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.3

CVE-2015-0858

  • EPSS 0.04%
  • Published 06.05.2016 17:59:01
  • Last modified 12.04.2025 10:46:40

Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardiff-$$ temporary directory.

10

CVE-2015-0857

  • EPSS 3.12%
  • Published 06.05.2016 17:59:00
  • Last modified 12.04.2025 10:46:40

Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a (1) tar file or (2) file within a tar file.