{"uuid": "e1773ea8-cab5-4298-98e9-98a412e2e31f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28949", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/fileformat/archive_tar_arb_file_write.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"gwillcox-r7\", \"xorathustra\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module takes advantages of Archive_Tar <= 1.4.10's lack of validation of file stream wrappers contained\\n          within filenames to write an arbitrary file containing user controlled content to an arbitrary file\\n          on disk. Note that the file will be written to disk with the permissions of the user that PHP is\\n          running as, so it may not be possible to overwrite some files if the PHP user is not appropriately\\n          privileged.\", \"disclosure_date\": \"2020-11-17\", \"fullname\": \"exploit/multi/fileformat/archive_tar_arb_file_write\", \"is_install_path\": true, \"mod_time\": \"2022-04-19 16:40:57 +0000\", \"name\": \"PEAR Archive_Tar 1.4.10 Arbitrary File Write\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/fileformat/archive_tar_arb_file_write.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/fileformat/archive_tar_arb_file_write\", \"references\": [\"URL-https://github.com/pear/Archive_Tar/issues/33\", \"CVE-2020-28949\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Archive_Tar <= 1.4.10\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:38.674319Z"}