6.8 - GLSA-200812-10

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	Archive::Tar: Directory traversal vulnerability

Informations
Name	GLSA-200812-10	First vendor Publication	2008-12-10
Vendor	Gentoo	Last vendor Modification	2008-12-10
Severity (Vendor)	Normal	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score	6.8	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Synopsis

A directory traversal vulnerability has been discovered in Archive::Tar.

Background

Archive::Tar is a Perl module for creation and manipulation of tar files.

Description

Jonathan Smith of rPath reported that Archive::Tar does not check for
".." in file names.

Impact

A remote attacker could entice a user or automated system to extract a specially crafted tar archive, overwriting files at arbitrary locations outside of the specified directory.

Workaround

There is no known workaround at this time.

Resolution

All Archive::Tar users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=perl-core/Archive-Tar-1.40"

References

[ 1 ] CVE-2007-4829 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4829

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-200812-10.xml

Original Source

Url : http://security.gentoo.org/glsa/glsa-200812-10.xml

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-22	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:11658

Oval ID:	oval:org.mitre.oval:def:11658
Title:	Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences.
Description:	Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2007-4829	Version:	5
Platform(s):	Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND perl-Archive-Tar is earlier than 0:1.39.1-1.el4_8.1 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND perl-Archive-Tar is earlier than 1:1.39.1-1.el5_5.1

Definition Id: oval:org.mitre.oval:def:22332

Oval ID:	oval:org.mitre.oval:def:22332
Title:	RHSA-2010:0505: perl-Archive-Tar security update (Moderate)
Description:	Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0505-01 CESA-2010:0505 CVE-2007-4829	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	perl-Archive-Tar
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x AND perl-Archive-Tar is earlier than 1:1.39.1-1.el5_5.1

Definition Id: oval:org.mitre.oval:def:23048

Oval ID:	oval:org.mitre.oval:def:23048
Title:	ELSA-2010:0505: perl-Archive-Tar security update (Moderate)
Description:	Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0505-01 CVE-2007-4829	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	perl-Archive-Tar
Definition Synopsis:
Oracle Linux 5.x AND perl-Archive-Tar is earlier than 1:1.39.1-1.el5_5.1

CPE : Common Platform Enumeration

Type	Description	Count
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:8.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:8.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:7.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:6.06::::lts:::	4

OpenVAS Exploits

Date	Description
2011-08-09	Name : CentOS Update for perl-Archive-Tar CESA-2010:0505 centos5 i386 File : nvt/gb_CESA-2010_0505_perl-Archive-Tar_centos5_i386.nasl
2010-07-06	Name : Perl Archive::Tar Module Remote Directory Traversal Vulnerability File : nvt/gb_perl_archive_tar_26355.nasl
2010-07-02	Name : RedHat Update for perl-Archive-Tar RHSA-2010:0505-01 File : nvt/gb_RHSA-2010_0505-01_perl-Archive-Tar.nasl
2009-07-29	Name : Fedora Core 10 FEDORA-2009-7680 (perl) File : nvt/fcore_2009_7680.nasl
2009-02-13	Name : Fedora Update for perl FEDORA-2008-11736 File : nvt/gb_fedora_2008_11736_perl_fc10.nasl
2009-01-20	Name : Ubuntu USN-700-2 (perl) File : nvt/ubuntu_700_2.nasl
2009-01-02	Name : Fedora Core 10 FEDORA-2008-11736 (perl) File : nvt/fcore_2008_11736.nasl
2008-12-29	Name : Ubuntu USN-700-1 (perl) File : nvt/ubuntu_700_1.nasl
2008-12-23	Name : Gentoo Security Advisory GLSA 200812-10 (Archive-Tar) File : nvt/glsa_200812_10.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
40410	Perl Archive::Tar Module TAR Archive Traversal Arbitrary File Overwrite

Nessus® Vulnerability Scanner

Date	Description
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2010-0505.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100701_perl_Archive_Tar_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2010-07-28	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0505.nasl - Type : ACT_GATHER_INFO
2010-07-13	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0505.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Fedora host is missing a security update. File : fedora_2008-11736.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-700-1.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-700-2.nasl - Type : ACT_GATHER_INFO
2008-12-11	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200812-10.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:36:10	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	3
CPE ID(s)	4
osvdb(s)	1
Openvas Exploit(s)	9
Nessus® Exploit(s)	8

	Related
6.8	CVE-2007-4829
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 1 more Alert(s)