PT-2018-2673 · Pear+1 · Archive Tar+1
Farisv
·
Published
2018-12-20
·
Updated
2024-06-15
·
CVE-2018-1000888
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PEAR Archive Tar versions 1.4.3 and earlier
Description
The issue is related to the Archive Tar class, where several file operations use the
$v header['filename'] parameter. This can be exploited by crafting a tar file with a malicious path, potentially leading to object injection and arbitrary file deletion. In some cases, it may also be possible to achieve remote code execution, resulting in file modification or deletion. The vulnerability is related to the restoration of untrusted data in memory.Recommendations
For PEAR Archive Tar versions 1.4.3 and earlier, update to version 1.4.4 to resolve the issue.
As a temporary workaround, consider restricting the use of the Archive Tar class until a patch is available.
Avoid using the
$v header['filename'] parameter in file operations to minimize the risk of exploitation.Exploit
Fix
RCE
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Archive Tar
Ubuntu