[Forgot Password]
Login  Register Subscribe

23631

 
 

115083

 
 

97147

 
 

909

 
 

78764

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2005-1918

Date: (C)2005-12-31   (M)2017-10-12 


The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".

CVSS Score: 2.6Access Vector: NETWORK
Exploit Score: 4.9Access Complexity: HIGH
Impact Score: 2.9Authentication: NONE
 Confidentiality: NONE
 Integrity: PARTIAL
 Availability: NONE





Reference:
SECTRACK-1015655
SECUNIA-18988
SECUNIA-19130
SECUNIA-19183
20060301-01-U
SECUNIA-20397
BID-5834
FLSA:183571-1
RHSA-2006:0195
SUSE-SR:2006:005
http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589

CPE    2
cpe:/o:redhat:enterprise_linux_desktop:3.0
cpe:/a:gnu:tar:1.13.25
CWE    1
CWE-22

© 2013 SecPod Technologies