Patchwire CVEs, their patch status, and feeds to follow them

CVE-2007-4829

Fixed in a distro release EPSS 4%

Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences.

Published 2007-11-02 · CVE record · OSV

Products: archive::tar_project archive::tar, canonical ubuntu_linux

Distro releases

ReleasePackageFixed in
Debian 12perl5.10.0-19
Debian 13perl5.10.0-19
Debian 14perl5.10.0-19
Red Hat Enterprise Linux 4perl-Archive-Tar0:1.39.1-1.el4_8.1
Red Hat Enterprise Linux 5perl-Archive-Tar1:1.39.1-1.el5_5.1