Path Traversal in Red Hat Fedora

CVE-2007-4134

Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.030 (86.0th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References