Tardiff Project Tardiff
2 CVEs affecting Tardiff Project Tardiff. Latest disclosed: 2016-05-06. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-0857 | Critical | 9.8 | 2016-05-06 | Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a (1) tar file or (2) file within a tar fil… |
CVE-2015-0858 | Low | 3.3 | 2016-05-06 | Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardiff-$$ temporary directory. |