CVE-2007-4829
Fixed in a distro release EPSS 4%
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences.
Products: archive::tar_project archive::tar, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | perl | 5.10.0-19 |
| Debian 13 | perl | 5.10.0-19 |
| Debian 14 | perl | 5.10.0-19 |
| Red Hat Enterprise Linux 4 | perl-Archive-Tar | 0:1.39.1-1.el4_8.1 |
| Red Hat Enterprise Linux 5 | perl-Archive-Tar | 1:1.39.1-1.el5_5.1 |