Canonical » Ubuntu Linux » 7.10 : Security Vulnerabilities, CVEs, Published In 2007 (Directory traversal)

Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences.