Gnu

Tar

20 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2010-0624

Exploit
  • EPSS 4.75%
  • Veröffentlicht 15.03.2010 13:28:25
  • Zuletzt bearbeitet 16.06.2026 23:16:31

Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arb...

7.5

CVE-2007-4476

  • EPSS 14.9%
  • Veröffentlicht 05.09.2007 01:17:00
  • Zuletzt bearbeitet 16.06.2026 22:44:10

Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."

6.8

CVE-2007-4131

  • EPSS 2.74%
  • Veröffentlicht 25.08.2007 00:17:00
  • Zuletzt bearbeitet 16.06.2026 22:43:27

Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.

4

CVE-2006-6097

Exploit
  • EPSS 10.74%
  • Veröffentlicht 24.11.2006 18:07:00
  • Zuletzt bearbeitet 16.06.2026 22:32:27

GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function ...

5.1

CVE-2006-0300

  • EPSS 5.17%
  • Veröffentlicht 24.02.2006 00:02:00
  • Zuletzt bearbeitet 16.06.2026 22:20:17

Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.

2.6

CVE-2005-1918

  • EPSS 2.93%
  • Veröffentlicht 31.12.2005 05:00:00
  • Zuletzt bearbeitet 16.06.2026 22:13:54

The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probabl...

10

CVE-2005-2541

  • EPSS 3.99%
  • Veröffentlicht 10.08.2005 04:00:00
  • Zuletzt bearbeitet 16.06.2026 22:15:10

Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges.

5

CVE-2002-1216

  • EPSS 1.57%
  • Veröffentlicht 28.10.2002 05:00:00
  • Zuletzt bearbeitet 16.06.2026 21:58:56

GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary files via a symlink attack, as the result of a modification that effectively disabled the security check.

5

CVE-2002-0399

  • EPSS 3.59%
  • Veröffentlicht 10.10.2002 04:00:00
  • Zuletzt bearbeitet 16.06.2026 21:57:22

Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary files during archive extraction via a (1) "/.." or (2) "./.." string, which removes the leading slash but leave...

2.1

CVE-2001-1267

Exploit
  • EPSS 1.07%
  • Veröffentlicht 12.07.2001 04:00:00
  • Zuletzt bearbeitet 16.06.2026 21:55:55

Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot).