Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2013-4420

Опубликовано: 20 фев. 2014
Источник: nvd
CVSS2: 5.8
EPSS Низкий

Описание

Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (dot dot) in a crafted tar file.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:feep:libtar:*:*:*:*:*:*:*:*
Версия до 1.2.20 (включая)
cpe:2.3:a:feep:libtar:1.2.11:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.13:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.14:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.15:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.16:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.17:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.18:*:*:*:*:*:*:*
cpe:2.3:a:feep:libtar:1.2.19:*:*:*:*:*:*:*

EPSS

Процентиль: 62%
0.00436
Низкий

5.8 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

ubuntu
больше 11 лет назад

Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (dot dot) in a crafted tar file.

redhat
больше 11 лет назад

Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (dot dot) in a crafted tar file.

msrc
почти 5 лет назад

Описание отсутствует

debian
больше 11 лет назад

Multiple directory traversal vulnerabilities in the (1) tar_extract_gl ...

github
около 3 лет назад

Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (dot dot) in a crafted tar file.

EPSS

Процентиль: 62%
0.00436
Низкий

5.8 Medium

CVSS2

Дефекты

CWE-22