Directory Traversal Affecting tar package, versions <1.27.1-2+deb8u1
Threat Intelligence
EPSS
0.49% (77th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-DEBIAN8-TAR-312279
- published 9 Dec 2016
- disclosed 9 Dec 2016
How to fix?
Upgrade Debian:8 tar to version 1.27.1-2+deb8u1 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream tar package and not the tar package as distributed by Debian.
See How to fix? for Debian:8 relevant fixed versions and status.
Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name parameter, aka POINTYFEATHER.
References
- https://security-tracker.debian.org/tracker/CVE-2016-6321
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6321
- http://www.debian.org/security/2016/dsa-3702
- https://security.gentoo.org/glsa/201611-19
- http://git.savannah.gnu.org/cgit/tar.git/commit/?id=7340f67b9860ea0531c1450e5aa261c50f67165d
- http://lists.gnu.org/archive/html/bug-tar/2016-10/msg00016.html
- http://packetstormsecurity.com/files/139370/GNU-tar-1.29-Extract-Pathname-Bypass.html
- https://sintonen.fi/advisories/tar-extract-pathname-bypass.proper.txt
- https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E
- https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
- http://seclists.org/fulldisclosure/2016/Oct/102
- http://seclists.org/fulldisclosure/2016/Oct/96
- http://www.securityfocus.com/bid/93937
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-6321
- http://www.ubuntu.com/usn/USN-3132-1
- https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
- https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
CVSS Scores
version 3.1