Описание
mixlib-archive Path Traversal vulnerability
Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using .. in tar archive entries
Пакеты
Наименование
mixlib-archive
rubygems
Затронутые версииВерсия исправления
< 0.4.0
0.4.0
Связанные уязвимости
CVSS3: 7.5
ubuntu
больше 8 лет назад
Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using ".." in tar archive entries
CVSS3: 7.5
nvd
больше 8 лет назад
Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using ".." in tar archive entries
CVSS3: 7.5
debian
больше 8 лет назад
Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable ...