Vulnerability in Gnu Tar

CVE-2007-4131

Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR…

EPSS: 0.027 (84.2th percentile) — read the EPSS interpretation.

Affected products

References