Unscored severity · published Aug 30, 2007
CVE-2007-4134
Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //
–
CVSS
3%
EPSS
No
On KEV
Description
Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FE
Fedora · Redhat
7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4134
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4134
secunia.com
http://secunia.com/advisories/26626
secunia.com
http://secunia.com/advisories/26672
secunia.com
http://secunia.com/advisories/26673
secunia.com
http://secunia.com/advisories/26857
More from Fedora
5.5
CVE-2018-19139
An issue has been found in JasPer 2.0.14
–
CVE-2011-1011
The seunshare_mount function in sandbox/seunshare.c in seunshare in certain Red Hat packages of policycoreutils 2.0.83 and earlier in Red Hat Enterprise Linux (RHEL) 6 and…
–
CVE-2009-3080
Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain…
–
CVE-2009-1573
xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain…
–
CVE-2008-3832
A certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora 8, and before 2.6.26.5-45 on Fedora 9, allows local users to cause a denial of…