Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2013-4420

Опубликовано: 20 фев. 2014
Источник: nvd
CVSS2: 5.8
EPSS Низкий

Описание

Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (dot dot) in a crafted tar file.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:feep:libtar:*:*:*:*:*:*:*:*
Версия до 1.2.20 (включая)
cpe:2.3:a:feep:libtar:1.2.11:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.13:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.14:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.15:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.16:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.17:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.18:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.19:*:*:*:*:*:*:*

EPSS

Процентиль: 69%
0.00604
Низкий

5.8 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

ubuntu
почти 12 лет назад

Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (dot dot) in a crafted tar file.

redhat
больше 12 лет назад

Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (dot dot) in a crafted tar file.

msrc
больше 5 лет назад

Описание отсутствует

debian
почти 12 лет назад

Multiple directory traversal vulnerabilities in the (1) tar_extract_gl ...

github
больше 3 лет назад

Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (dot dot) in a crafted tar file.

EPSS

Процентиль: 69%
0.00604
Низкий

5.8 Medium

CVSS2

Дефекты

CWE-22