CVE-2007-4131
Publication date 25 August 2007
Last updated 24 July 2024
Ubuntu priority
Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.
Status
Package | Ubuntu Release | Status |
---|---|---|
tar | 7.04 feisty |
Fixed 1.16-2ubuntu0.1
|
6.10 edgy |
Fixed 1.15.91-2ubuntu0.4
|
|
6.06 LTS dapper |
Fixed 1.15.1-2ubuntu2.2
|