PT-2005-2874 · Gnu+1 · Gnu Tar+1

Josh Bressers · Publicado 2005-12-31 · Atualizado 2024-06-15 · CVE-2005-1918

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux versions 2.1 through 3

Description A directory traversal issue in GNU tar allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".

Recommendations For Red Hat Enterprise Linux versions 2.1 through 3, update the GNU tar package to a version that correctly fixes the directory traversal vulnerability.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2005-1918

OPENSUSE-SU-2024:11422-1

RHSA-2006:0195

Produtos afetados

Gnu Tar

Red Hat

Referências · 25

• https://suse.com/security/cve/CVE-2018-20482 · Nota
• ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2006-6097 · Nota
• http://securityfocus.com/bid/5834 · Correção
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9946 · Nota
• https://suse.com/security/cve/CVE-2005-1918 · Nota
• http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm · Nota
• http://secunia.com/advisories/20397 · Aviso do Fabricante
• http://securitytracker.com/id?1015655 · Correção
• http://secunia.com/advisories/19130 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:11422-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-1918 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-9923 · Nota
• https://suse.com/security/cve/CVE-2001-1267 · Nota
• http://securityfocus.com/archive/1/430297/100/0/threaded · Aviso do Fabricante