Unscored severity · published Nov 2, 2007
CVE-2007-4829
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that…
–
CVSS
4.3%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.3% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
Archive::tar · Archive::tar Project
through 1.36 · source: NVD
UL
Ubuntu Linux · Canonical
6.06; 7.10; 8.04; 8.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4829
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4829
Broken Link
http://osvdb.org/40410
Mailing List
http://rt.cpan.org/Public/Bug/Display.html?id=29517
Mailing List
http://rt.cpan.org/Public/Bug/Display.html?id=30380
Third Party Advisory
http://secunia.com/advisories/27539
Third Party Advisory
http://secunia.com/advisories/33116
Third Party Advisory
http://secunia.com/advisories/33314
More from Archive::tar
9.1
CVE-2026-42496
Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory
7.5
CVE-2026-9538
Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header
7.5
CVE-2026-42497
Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory
7.5
CVE-2018-12015
In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file…