Vulnerability Details : CVE-2006-6097
GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216.
Products affected by CVE-2006-6097
- cpe:2.3:a:gnu:tar:1.15.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:tar:1.16:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2006-6097
2.49%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 90 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2006-6097
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.0
|
MEDIUM | AV:N/AC:H/Au:N/C:N/I:P/A:P |
4.9
|
4.9
|
NIST |
Vendor statements for CVE-2006-6097
-
Red Hat 2007-03-14Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.
References for CVE-2006-6097
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10963
404 Not Found
-
http://securitytracker.com/id?1017423
Access Denied
-
http://security.freebsd.org/advisories/FreeBSD-SA-06:26.gtar.asc
-
http://www.securityfocus.com/archive/1/464268/100/0/threaded
-
http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html
Page not found
-
http://docs.info.apple.com/article.html?artnum=305214
-
http://www.debian.org/security/2006/dsa-1223
[SECURITY] [DSA 1223-1] New tar packages fix arbitrary file overwrite
-
http://www.us-cert.gov/cas/techalerts/TA07-072A.html
Page Not Found | CISAUS Government Resource
-
http://www.mandriva.com/security/advisories?name=MDKSA-2006:219
Mandriva
-
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216937
216937 – CVE-2006-6097 GNU tar directory traversalExploit
-
http://security.gentoo.org/glsa/glsa-200612-10.xml
Tar: Directory traversal vulnerability (GLSA 200612-10) — Gentoo security
-
http://www.ubuntu.com/usn/usn-385-1
USN-385-1: tar vulnerability | Ubuntu security notices | Ubuntu
-
http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.038.html
-
http://support.avaya.com/elmodocs2/security/ASA-2007-015.htm
ASA-2007-015 (RHSA-2006-0749)
-
http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050812.html
[Full-Disclosure] Mailing List CharterExploit
-
http://www.securityfocus.com/bid/21235
Exploit
-
http://kb.vmware.com/KanisaPlatform/Publishing/817/2240267_f.SAL_Public.html
404 Not Found
-
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.469379
The Slackware Linux Project: Slackware Security Advisories
-
http://www.vupen.com/english/advisories/2006/5102
Site en construction
-
https://issues.rpath.com/browse/RPL-821
-
http://rhn.redhat.com/errata/RHSA-2006-0749.html
RHSA-2006:0749 - Security Advisory - Red Hat Customer Portal
-
http://www.vupen.com/english/advisories/2007/0930
Webmail: access your OVH emails on ovhcloud.com | OVHcloud
-
http://www.vupen.com/english/advisories/2006/4717
Site en construction
-
http://www.vupen.com/english/advisories/2007/1171
Site en construction
-
ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc
-
http://www.trustix.org/errata/2006/0068/
Trustix | Empowering Trust and Security in the Digital Age
-
http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
-
http://securityreason.com/securityalert/1918
GNU tar directory traversal - CXSecurity.com
-
http://www.securityfocus.com/archive/1/453286/100/0/threaded
Jump to