PT-2005-2874 · Gnu+1 · Gnu Tar+1

Josh Bressers · Published 2005-12-31 · Updated 2024-06-15 · CVE-2005-1918

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux versions 2.1 through 3

Description A directory traversal issue in GNU tar allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".

Recommendations For Red Hat Enterprise Linux versions 2.1 through 3, update the GNU tar package to a version that correctly fixes the directory traversal vulnerability.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2005-1918

OPENSUSE-SU-2024:11422-1

RHSA-2006:0195

Affected Products

Gnu Tar

Red Hat

References · 25

• ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc · Vendor Advisory
• http://securityfocus.com/bid/5834 · Patch
• http://secunia.com/advisories/20397 · Vendor Advisory
• http://securitytracker.com/id?1015655 · Patch
• http://secunia.com/advisories/19130 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11422-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-1918 · Vendor Advisory
• http://securityfocus.com/archive/1/430297/100/0/threaded · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-1918 · Vendor Advisory
• http://secunia.com/advisories/18988 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0195.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-1918 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1918 · Security Note
• http://secunia.com/advisories/19183 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_05_sr.html · Vendor Advisory