CVE-2016-6321

Опубликовано: 09 дек. 2016

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Средний

Описание

Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name parameter, aka POINTYFEATHER.

Ссылки

http://git.savannah.gnu.org/cgit/tar.git/commit/?id=7340f67b9860ea0531c1450e5aa261c50f67165d
Issue Tracking
Patch
http://lists.gnu.org/archive/html/bug-tar/2016-10/msg00016.html
Mailing List
Vendor Advisory
http://packetstormsecurity.com/files/139370/GNU-tar-1.29-Extract-Pathname-Bypass.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2016/Oct/102
Mailing List
Patch
Third Party Advisory
http://seclists.org/fulldisclosure/2016/Oct/96
Mailing List
Third Party Advisory
http://www.debian.org/security/2016/dsa-3702
http://www.securityfocus.com/bid/93937
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-3132-1
https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
https://security.gentoo.org/glsa/201611-19
https://sintonen.fi/advisories/tar-extract-pathname-bypass.proper.txt
Third Party Advisory
http://git.savannah.gnu.org/cgit/tar.git/commit/?id=7340f67b9860ea0531c1450e5aa261c50f67165d
Issue Tracking
Patch
http://lists.gnu.org/archive/html/bug-tar/2016-10/msg00016.html
Mailing List
Vendor Advisory
http://packetstormsecurity.com/files/139370/GNU-tar-1.29-Extract-Pathname-Bypass.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2016/Oct/102
Mailing List
Patch
Third Party Advisory
http://seclists.org/fulldisclosure/2016/Oct/96
Mailing List
Third Party Advisory
http://www.debian.org/security/2016/dsa-3702
http://www.securityfocus.com/bid/93937
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-3132-1

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnu:tar:1.14:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.15:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.15.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.15.90:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.15.91:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.16:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.16.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.17:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.18:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.19:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.20:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.21:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.22:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.23:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.24:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.25:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.26:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.27:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.27.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.28:*:*:*:*:*:*:*

cpe:2.3:a:gnu:tar:1.29:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.15155

Средний

7.5 High

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

CVE-2016-6321

CVSS3: 7.5

ubuntu

больше 9 лет назад

CVE-2016-6321

redhat

почти 10 лет назад

CVE-2016-6321

CVSS3: 7.5

debian

больше 9 лет назад

Directory traversal vulnerability in the safer_name_suffix function in ...

openSUSE-SU-2016:3003-1

suse-cvrf

больше 9 лет назад

Security update for tar

SUSE-SU-2016:2896-1

suse-cvrf

больше 9 лет назад

Security update for tar

EPSS

Процентиль: 96%

0.15155

Средний

7.5 High

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22