CVE-2007-4134
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.0%
Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.
Affected products
n/a · n/aReferences
ftp://ftp.berlios.de/pub/star/alpha/AN-1.5a84ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.aschttps://bugs.gentoo.org/show_bug.cgi?id=189690http://secunia.com/advisories/26626http://secunia.com/advisories/26672http://secunia.com/advisories/26673http://secunia.com/advisories/26857http://secunia.com/advisories/27318http://secunia.com/advisories/27544http://securitytracker.com/id?1018646https://issues.rpath.com/browse/RPL-1669https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11098