CVE-2001-1267

概要

参考情報

• alpha.gnu.org/gnu/tar/tar-1.13.25.tar.gz
• distro.conectiva.com.br/atualizacoes
• online.securityfocus.com/advisories/4514
• online.securityfocus.com/archive/1/196445 · Exploit
• sunsolve.sun.com/search/document.do
• iss.net/security_center/static/10224.php · Vendor Advisory
• mandrakesoft.com/security/advisories
• redhat.com/support/errata/RHSA-2002-096.html · Patch
• redhat.com/support/errata/RHSA-2002-138.html
• redhat.com/support/errata/RHSA-2003-218.html
• securityfocus.com/bid/3024

tar のその他の脆弱性

• CVE-2026-18477中 4.4A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write a…
• CVE-2026-18508中 4.4A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated…
• CVE-2025-45582中 4.1GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the vict…
• CVE-2023-39804中 6.2In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
• CVE-2022-48303中 5.5GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to c…