~ / search / GHSA-f3xw-vgc7-f7h8

GHSA-f3xw-vgc7-f7h8

PEAR::Archive_Tar Directory Traversal vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2006-0931

Packages

EcosystemPackageAffectedFixed in
Packagist pear/archive_tar >= 1.2, < 1.3.2 1.3.2

Details

As written in the advisory (Markdown source, shown as plain text).

Directory traversal vulnerability in PEAR::Archive_Tar 1.2, and other versions before 1.3.2, allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a TAR archive.

References

External links from the advisory. They lead to third-party sites.