Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2005-1918 (GCVE-0-2005-1918)
Vulnerability from cvelistv5
Published
2006-02-21 19:00
Modified
2024-08-07 22:06
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-07T22:06:57.773Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "oval:org.mitre.oval:def:9946", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred" ], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9946" }, { "name": "5834", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/5834" }, { "name": "SUSE-SR:2006:005", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html" }, { "name": "1015655", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://securitytracker.com/id?1015655" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm" }, { "name": "18988", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/18988" }, { "name": "19130", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/19130" }, { "name": "RHSA-2006:0195", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://www.redhat.com/support/errata/RHSA-2006-0195.html" }, { "name": "20397", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/20397" }, { "name": "FLSA:183571-1", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "http://www.securityfocus.com/archive/1/430297/100/0/threaded" }, { "name": "20060301-01-U", "tags": [ "vendor-advisory", "x_refsource_SGI", "x_transferred" ], "url": "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589" }, { "name": "19183", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/19183" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2006-02-21T00:00:00", "descriptions": [ { "lang": "en", "value": "The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an \"incorrect optimization\" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving \"/../\" sequences with a leading \"/\"." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2018-10-19T14:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat" }, "references": [ { "name": "oval:org.mitre.oval:def:9946", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL" ], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9946" }, { "name": "5834", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/5834" }, { "name": "SUSE-SR:2006:005", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html" }, { "name": "1015655", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://securitytracker.com/id?1015655" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm" }, { "name": "18988", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/18988" }, { "name": "19130", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/19130" }, { "name": "RHSA-2006:0195", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://www.redhat.com/support/errata/RHSA-2006-0195.html" }, { "name": "20397", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/20397" }, { "name": "FLSA:183571-1", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "http://www.securityfocus.com/archive/1/430297/100/0/threaded" }, { "name": "20060301-01-U", "tags": [ "vendor-advisory", "x_refsource_SGI" ], "url": "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589" }, { "name": "19183", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/19183" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2005-1918", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an \"incorrect optimization\" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving \"/../\" sequences with a leading \"/\"." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "oval:org.mitre.oval:def:9946", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9946" }, { "name": "5834", "refsource": "BID", "url": "http://www.securityfocus.com/bid/5834" }, { "name": "SUSE-SR:2006:005", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html" }, { "name": "1015655", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1015655" }, { "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm", "refsource": "CONFIRM", "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm" }, { "name": "18988", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/18988" }, { "name": "19130", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19130" }, { "name": "RHSA-2006:0195", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2006-0195.html" }, { "name": "20397", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20397" }, { "name": "FLSA:183571-1", "refsource": "FEDORA", "url": "http://www.securityfocus.com/archive/1/430297/100/0/threaded" }, { "name": "20060301-01-U", "refsource": "SGI", "url": "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc" }, { "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589" }, { "name": "19183", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19183" } ] } } } }, "cveMetadata": { "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2005-1918", "datePublished": "2006-02-21T19:00:00", "dateReserved": "2005-06-08T00:00:00", "dateUpdated": "2024-08-07T22:06:57.773Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2005-1918\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2005-12-31T05:00:00.000\",\"lastModified\":\"2025-04-03T01:03:51.193\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an \\\"incorrect optimization\\\" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving \\\"/../\\\" sequences with a leading \\\"/\\\".\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:H/Au:N/C:N/I:P/A:N\",\"baseScore\":2.6,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"HIGH\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":4.9,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-22\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:tar:1.13.25:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"60CD7558-833D-473B-99A4-854FB6CC6C9A\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*\",\"matchCriteriaId\":\"2641EE56-6F9D-400B-B456-877F4DA79B10\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*\",\"matchCriteriaId\":\"A4A9461E-C117-42EC-9F14-DF2A82BA7C5D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*\",\"matchCriteriaId\":\"E0B458EA-495E-40FA-9379-C03757F7B1EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*\",\"matchCriteriaId\":\"409E324A-C040-494F-A026-9DCAE01C07F8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*\",\"matchCriteriaId\":\"1728AB5D-55A9-46B0-A412-6F7263CAEB5A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*\",\"matchCriteriaId\":\"6474B775-C893-491F-A074-802AFB1FEDD8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*\",\"matchCriteriaId\":\"81B543F9-C209-46C2-B0AE-E14818A6992E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*\",\"matchCriteriaId\":\"EC79FF22-2664-4C40-B0B3-6D23B5F45162\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*\",\"matchCriteriaId\":\"DB89C970-DE94-4E09-A90A-077DB83AD156\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*\",\"matchCriteriaId\":\"84A50ED3-FD0D-4038-B3E7-CC65D166C968\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*\",\"matchCriteriaId\":\"8DBD9D3C-40AB-449D-A9A8-A09DF2DEDB96\"}]}]}],\"references\":[{\"url\":\"ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/18988\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/19130\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/19183\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/20397\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://securitytracker.com/id?1015655\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.novell.com/linux/security/advisories/2006_05_sr.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2006-0195.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/430297/100/0/threaded\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/5834\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9946\",\"source\":\"secalert@redhat.com\"},{\"url\":\"ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/18988\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/19130\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/19183\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/20397\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://securitytracker.com/id?1015655\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.novell.com/linux/security/advisories/2006_05_sr.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2006-0195.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/430297/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/5834\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9946\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}" } }
rhsa-2006_0195
Vulnerability from csaf_redhat
Published
2006-02-21 14:35
Modified
2024-11-22 00:09
Summary
Red Hat Security Advisory: tar security update
Notes
Topic
An updated tar package that fixes a path traversal flaw is now available.
This update has been rated as having low security impact by the Red Hat
Security Response Team.
Details
The GNU tar program saves many files together in one archive and can
restore individual files (or all of the files) from that archive.
In 2002, a path traversal flaw was found in the way GNU tar extracted
archives. A malicious user could create a tar archive that could write to
arbitrary files to which the user running GNU tar has write access
(CVE-2002-0399). Red Hat included a backported security patch to correct
this issue in Red Hat Enterprise Linux 3, and an erratum for Red Hat
Enterprise Linux 2.1 users was issued.
During internal testing, we discovered that our backported security patch
contained an incorrect optimization and therefore was not sufficient to
completely correct this vulnerability. The Common Vulnerabilities and
Exposures project (cve.mitre.org) assigned the name CVE-2005-1918 to this
issue.
Users of tar should upgrade to this updated package, which contains a
replacement backported patch to correct this issue.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An updated tar package that fixes a path traversal flaw is now available.\n\nThis update has been rated as having low security impact by the Red Hat\nSecurity Response Team.", "title": "Topic" }, { "category": "general", "text": "The GNU tar program saves many files together in one archive and can\nrestore individual files (or all of the files) from that archive. \n\nIn 2002, a path traversal flaw was found in the way GNU tar extracted\narchives. A malicious user could create a tar archive that could write to\narbitrary files to which the user running GNU tar has write access\n(CVE-2002-0399). Red Hat included a backported security patch to correct\nthis issue in Red Hat Enterprise Linux 3, and an erratum for Red Hat\nEnterprise Linux 2.1 users was issued.\n\nDuring internal testing, we discovered that our backported security patch\ncontained an incorrect optimization and therefore was not sufficient to\ncompletely correct this vulnerability. The Common Vulnerabilities and\nExposures project (cve.mitre.org) assigned the name CVE-2005-1918 to this\nissue.\n\nUsers of tar should upgrade to this updated package, which contains a\nreplacement backported patch to correct this issue.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2006:0195", "url": "https://access.redhat.com/errata/RHSA-2006:0195" }, { "category": "external", "summary": "140589", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=140589" }, { "category": "external", "summary": "140598", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=140598" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0195.json" } ], "title": "Red Hat Security Advisory: tar security update", "tracking": { "current_release_date": "2024-11-22T00:09:21+00:00", "generator": { "date": "2024-11-22T00:09:21+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2006:0195", "initial_release_date": "2006-02-21T14:35:00+00:00", "revision_history": [ { "date": "2006-02-21T14:35:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2006-02-21T00:00:00+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T00:09:21+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AS version 3", "product": { "name": "Red Hat Enterprise Linux AS version 3", "product_id": "3AS", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:3::as" } } }, { "category": "product_name", "name": "Red Hat Desktop version 3", "product": { "name": "Red Hat Desktop version 3", "product_id": "3Desktop", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:3::desktop" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ES version 3", "product": { "name": "Red Hat Enterprise Linux ES version 3", "product_id": "3ES", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:3::es" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux WS version 3", "product": { "name": "Red Hat Enterprise Linux WS version 3", "product_id": "3WS", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:3::ws" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "product": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "product_id": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-14.RHEL3?arch=ia64" } } }, { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.ia64", "product": { "name": "tar-0:1.13.25-14.RHEL3.ia64", "product_id": "tar-0:1.13.25-14.RHEL3.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=ia64" } } } ], "category": "architecture", "name": "ia64" }, { "branches": [ { "category": "product_version", "name": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "product": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "product_id": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-14.RHEL3?arch=x86_64" } } }, { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.x86_64", "product": { "name": "tar-0:1.13.25-14.RHEL3.x86_64", "product_id": "tar-0:1.13.25-14.RHEL3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "product": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "product_id": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-14.RHEL3?arch=i386" } } }, { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.i386", "product": { "name": "tar-0:1.13.25-14.RHEL3.i386", "product_id": "tar-0:1.13.25-14.RHEL3.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=i386" } } } ], "category": "architecture", "name": "i386" }, { "branches": [ { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.src", "product": { "name": "tar-0:1.13.25-14.RHEL3.src", "product_id": "tar-0:1.13.25-14.RHEL3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "product": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "product_id": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-14.RHEL3?arch=ppc" } } }, { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.ppc", "product": { "name": "tar-0:1.13.25-14.RHEL3.ppc", "product_id": "tar-0:1.13.25-14.RHEL3.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=ppc" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "product": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "product_id": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-14.RHEL3?arch=s390x" } } }, { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.s390x", "product": { "name": "tar-0:1.13.25-14.RHEL3.s390x", "product_id": "tar-0:1.13.25-14.RHEL3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "product": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "product_id": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-14.RHEL3?arch=s390" } } }, { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.s390", "product": { "name": "tar-0:1.13.25-14.RHEL3.s390", "product_id": "tar-0:1.13.25-14.RHEL3.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=s390" } } } ], "category": "architecture", "name": "s390" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.src as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.src" }, "product_reference": "tar-0:1.13.25-14.RHEL3.src", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.src as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.src" }, "product_reference": "tar-0:1.13.25-14.RHEL3.src", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.src as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.src" }, "product_reference": "tar-0:1.13.25-14.RHEL3.src", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.src as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.src" }, "product_reference": "tar-0:1.13.25-14.RHEL3.src", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3WS" } ] }, "vulnerabilities": [ { "cve": "CVE-2005-1918", "discovery_date": "2003-06-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "140589" } ], "notes": [ { "category": "description", "text": "The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an \"incorrect optimization\" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving \"/../\" sequences with a leading \"/\".", "title": "Vulnerability description" }, { "category": "summary", "text": "tar archive path traversal issue", "title": "Vulnerability summary" } ], "product_status": { "fixed": [ "3AS:tar-0:1.13.25-14.RHEL3.i386", "3AS:tar-0:1.13.25-14.RHEL3.ia64", "3AS:tar-0:1.13.25-14.RHEL3.ppc", "3AS:tar-0:1.13.25-14.RHEL3.s390", "3AS:tar-0:1.13.25-14.RHEL3.s390x", "3AS:tar-0:1.13.25-14.RHEL3.src", "3AS:tar-0:1.13.25-14.RHEL3.x86_64", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "3Desktop:tar-0:1.13.25-14.RHEL3.i386", "3Desktop:tar-0:1.13.25-14.RHEL3.ia64", "3Desktop:tar-0:1.13.25-14.RHEL3.ppc", "3Desktop:tar-0:1.13.25-14.RHEL3.s390", "3Desktop:tar-0:1.13.25-14.RHEL3.s390x", "3Desktop:tar-0:1.13.25-14.RHEL3.src", "3Desktop:tar-0:1.13.25-14.RHEL3.x86_64", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "3ES:tar-0:1.13.25-14.RHEL3.i386", "3ES:tar-0:1.13.25-14.RHEL3.ia64", "3ES:tar-0:1.13.25-14.RHEL3.ppc", "3ES:tar-0:1.13.25-14.RHEL3.s390", "3ES:tar-0:1.13.25-14.RHEL3.s390x", "3ES:tar-0:1.13.25-14.RHEL3.src", "3ES:tar-0:1.13.25-14.RHEL3.x86_64", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "3WS:tar-0:1.13.25-14.RHEL3.i386", "3WS:tar-0:1.13.25-14.RHEL3.ia64", "3WS:tar-0:1.13.25-14.RHEL3.ppc", "3WS:tar-0:1.13.25-14.RHEL3.s390", "3WS:tar-0:1.13.25-14.RHEL3.s390x", "3WS:tar-0:1.13.25-14.RHEL3.src", "3WS:tar-0:1.13.25-14.RHEL3.x86_64", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2005-1918" }, { "category": "external", "summary": "RHBZ#140589", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=140589" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2005-1918", "url": "https://www.cve.org/CVERecord?id=CVE-2005-1918" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-1918", "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-1918" } ], "release_date": "2003-07-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2006-02-21T14:35:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied. Use Red Hat\nNetwork to download and update your packages. To launch the Red Hat\nUpdate Agent, use the following command:\n\n up2date\n\nFor information on how to install packages manually, refer to the\nfollowing Web page for the System Administration or Customization\nguide specific to your system:\n\n http://www.redhat.com/docs/manuals/enterprise/", "product_ids": [ "3AS:tar-0:1.13.25-14.RHEL3.i386", "3AS:tar-0:1.13.25-14.RHEL3.ia64", "3AS:tar-0:1.13.25-14.RHEL3.ppc", "3AS:tar-0:1.13.25-14.RHEL3.s390", "3AS:tar-0:1.13.25-14.RHEL3.s390x", "3AS:tar-0:1.13.25-14.RHEL3.src", "3AS:tar-0:1.13.25-14.RHEL3.x86_64", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "3Desktop:tar-0:1.13.25-14.RHEL3.i386", "3Desktop:tar-0:1.13.25-14.RHEL3.ia64", "3Desktop:tar-0:1.13.25-14.RHEL3.ppc", "3Desktop:tar-0:1.13.25-14.RHEL3.s390", "3Desktop:tar-0:1.13.25-14.RHEL3.s390x", "3Desktop:tar-0:1.13.25-14.RHEL3.src", "3Desktop:tar-0:1.13.25-14.RHEL3.x86_64", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "3ES:tar-0:1.13.25-14.RHEL3.i386", "3ES:tar-0:1.13.25-14.RHEL3.ia64", "3ES:tar-0:1.13.25-14.RHEL3.ppc", "3ES:tar-0:1.13.25-14.RHEL3.s390", "3ES:tar-0:1.13.25-14.RHEL3.s390x", "3ES:tar-0:1.13.25-14.RHEL3.src", "3ES:tar-0:1.13.25-14.RHEL3.x86_64", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "3WS:tar-0:1.13.25-14.RHEL3.i386", "3WS:tar-0:1.13.25-14.RHEL3.ia64", "3WS:tar-0:1.13.25-14.RHEL3.ppc", "3WS:tar-0:1.13.25-14.RHEL3.s390", "3WS:tar-0:1.13.25-14.RHEL3.s390x", "3WS:tar-0:1.13.25-14.RHEL3.src", "3WS:tar-0:1.13.25-14.RHEL3.x86_64", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2006:0195" } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tar archive path traversal issue" } ] }
rhsa-2006:0195
Vulnerability from csaf_redhat
Published
2006-02-21 14:35
Modified
2025-09-10 13:38
Summary
Red Hat Security Advisory: tar security update
Notes
Topic
An updated tar package that fixes a path traversal flaw is now available.
This update has been rated as having low security impact by the Red Hat
Security Response Team.
Details
The GNU tar program saves many files together in one archive and can
restore individual files (or all of the files) from that archive.
In 2002, a path traversal flaw was found in the way GNU tar extracted
archives. A malicious user could create a tar archive that could write to
arbitrary files to which the user running GNU tar has write access
(CVE-2002-0399). Red Hat included a backported security patch to correct
this issue in Red Hat Enterprise Linux 3, and an erratum for Red Hat
Enterprise Linux 2.1 users was issued.
During internal testing, we discovered that our backported security patch
contained an incorrect optimization and therefore was not sufficient to
completely correct this vulnerability. The Common Vulnerabilities and
Exposures project (cve.mitre.org) assigned the name CVE-2005-1918 to this
issue.
Users of tar should upgrade to this updated package, which contains a
replacement backported patch to correct this issue.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An updated tar package that fixes a path traversal flaw is now available.\n\nThis update has been rated as having low security impact by the Red Hat\nSecurity Response Team.", "title": "Topic" }, { "category": "general", "text": "The GNU tar program saves many files together in one archive and can\nrestore individual files (or all of the files) from that archive. \n\nIn 2002, a path traversal flaw was found in the way GNU tar extracted\narchives. A malicious user could create a tar archive that could write to\narbitrary files to which the user running GNU tar has write access\n(CVE-2002-0399). Red Hat included a backported security patch to correct\nthis issue in Red Hat Enterprise Linux 3, and an erratum for Red Hat\nEnterprise Linux 2.1 users was issued.\n\nDuring internal testing, we discovered that our backported security patch\ncontained an incorrect optimization and therefore was not sufficient to\ncompletely correct this vulnerability. The Common Vulnerabilities and\nExposures project (cve.mitre.org) assigned the name CVE-2005-1918 to this\nissue.\n\nUsers of tar should upgrade to this updated package, which contains a\nreplacement backported patch to correct this issue.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2006:0195", "url": "https://access.redhat.com/errata/RHSA-2006:0195" }, { "category": "external", "summary": "140589", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=140589" }, { "category": "external", "summary": "140598", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=140598" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0195.json" } ], "title": "Red Hat Security Advisory: tar security update", "tracking": { "current_release_date": "2025-09-10T13:38:18+00:00", "generator": { "date": "2025-09-10T13:38:18+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.7" } }, "id": "RHSA-2006:0195", "initial_release_date": "2006-02-21T14:35:00+00:00", "revision_history": [ { "date": "2006-02-21T14:35:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2006-02-21T00:00:00+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-09-10T13:38:18+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AS version 3", "product": { "name": "Red Hat Enterprise Linux AS version 3", "product_id": "3AS", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:3::as" } } }, { "category": "product_name", "name": "Red Hat Desktop version 3", "product": { "name": "Red Hat Desktop version 3", "product_id": "3Desktop", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:3::desktop" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ES version 3", "product": { "name": "Red Hat Enterprise Linux ES version 3", "product_id": "3ES", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:3::es" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux WS version 3", "product": { "name": "Red Hat Enterprise Linux WS version 3", "product_id": "3WS", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:3::ws" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "product": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "product_id": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-14.RHEL3?arch=ia64" } } }, { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.ia64", "product": { "name": "tar-0:1.13.25-14.RHEL3.ia64", "product_id": "tar-0:1.13.25-14.RHEL3.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=ia64" } } } ], "category": "architecture", "name": "ia64" }, { "branches": [ { "category": "product_version", "name": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "product": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "product_id": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-14.RHEL3?arch=x86_64" } } }, { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.x86_64", "product": { "name": "tar-0:1.13.25-14.RHEL3.x86_64", "product_id": "tar-0:1.13.25-14.RHEL3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "product": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "product_id": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-14.RHEL3?arch=i386" } } }, { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.i386", "product": { "name": "tar-0:1.13.25-14.RHEL3.i386", "product_id": "tar-0:1.13.25-14.RHEL3.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=i386" } } } ], "category": "architecture", "name": "i386" }, { "branches": [ { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.src", "product": { "name": "tar-0:1.13.25-14.RHEL3.src", "product_id": "tar-0:1.13.25-14.RHEL3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "product": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "product_id": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-14.RHEL3?arch=ppc" } } }, { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.ppc", "product": { "name": "tar-0:1.13.25-14.RHEL3.ppc", "product_id": "tar-0:1.13.25-14.RHEL3.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=ppc" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "product": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "product_id": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-14.RHEL3?arch=s390x" } } }, { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.s390x", "product": { "name": "tar-0:1.13.25-14.RHEL3.s390x", "product_id": "tar-0:1.13.25-14.RHEL3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "product": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "product_id": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-14.RHEL3?arch=s390" } } }, { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.s390", "product": { "name": "tar-0:1.13.25-14.RHEL3.s390", "product_id": "tar-0:1.13.25-14.RHEL3.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=s390" } } } ], "category": "architecture", "name": "s390" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.src as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.src" }, "product_reference": "tar-0:1.13.25-14.RHEL3.src", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.src as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.src" }, "product_reference": "tar-0:1.13.25-14.RHEL3.src", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.src as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.src" }, "product_reference": "tar-0:1.13.25-14.RHEL3.src", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.src as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.src" }, "product_reference": "tar-0:1.13.25-14.RHEL3.src", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3WS" } ] }, "vulnerabilities": [ { "cve": "CVE-2005-1918", "discovery_date": "2003-06-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "140589" } ], "notes": [ { "category": "description", "text": "The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an \"incorrect optimization\" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving \"/../\" sequences with a leading \"/\".", "title": "Vulnerability description" }, { "category": "summary", "text": "tar archive path traversal issue", "title": "Vulnerability summary" } ], "product_status": { "fixed": [ "3AS:tar-0:1.13.25-14.RHEL3.i386", "3AS:tar-0:1.13.25-14.RHEL3.ia64", "3AS:tar-0:1.13.25-14.RHEL3.ppc", "3AS:tar-0:1.13.25-14.RHEL3.s390", "3AS:tar-0:1.13.25-14.RHEL3.s390x", "3AS:tar-0:1.13.25-14.RHEL3.src", "3AS:tar-0:1.13.25-14.RHEL3.x86_64", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "3Desktop:tar-0:1.13.25-14.RHEL3.i386", "3Desktop:tar-0:1.13.25-14.RHEL3.ia64", "3Desktop:tar-0:1.13.25-14.RHEL3.ppc", "3Desktop:tar-0:1.13.25-14.RHEL3.s390", "3Desktop:tar-0:1.13.25-14.RHEL3.s390x", "3Desktop:tar-0:1.13.25-14.RHEL3.src", "3Desktop:tar-0:1.13.25-14.RHEL3.x86_64", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "3ES:tar-0:1.13.25-14.RHEL3.i386", "3ES:tar-0:1.13.25-14.RHEL3.ia64", "3ES:tar-0:1.13.25-14.RHEL3.ppc", "3ES:tar-0:1.13.25-14.RHEL3.s390", "3ES:tar-0:1.13.25-14.RHEL3.s390x", "3ES:tar-0:1.13.25-14.RHEL3.src", "3ES:tar-0:1.13.25-14.RHEL3.x86_64", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "3WS:tar-0:1.13.25-14.RHEL3.i386", "3WS:tar-0:1.13.25-14.RHEL3.ia64", "3WS:tar-0:1.13.25-14.RHEL3.ppc", "3WS:tar-0:1.13.25-14.RHEL3.s390", "3WS:tar-0:1.13.25-14.RHEL3.s390x", "3WS:tar-0:1.13.25-14.RHEL3.src", "3WS:tar-0:1.13.25-14.RHEL3.x86_64", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2005-1918" }, { "category": "external", "summary": "RHBZ#140589", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=140589" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2005-1918", "url": "https://www.cve.org/CVERecord?id=CVE-2005-1918" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-1918", "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-1918" } ], "release_date": "2003-07-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2006-02-21T14:35:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied. Use Red Hat\nNetwork to download and update your packages. To launch the Red Hat\nUpdate Agent, use the following command:\n\n up2date\n\nFor information on how to install packages manually, refer to the\nfollowing Web page for the System Administration or Customization\nguide specific to your system:\n\n http://www.redhat.com/docs/manuals/enterprise/", "product_ids": [ "3AS:tar-0:1.13.25-14.RHEL3.i386", "3AS:tar-0:1.13.25-14.RHEL3.ia64", "3AS:tar-0:1.13.25-14.RHEL3.ppc", "3AS:tar-0:1.13.25-14.RHEL3.s390", "3AS:tar-0:1.13.25-14.RHEL3.s390x", "3AS:tar-0:1.13.25-14.RHEL3.src", "3AS:tar-0:1.13.25-14.RHEL3.x86_64", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "3Desktop:tar-0:1.13.25-14.RHEL3.i386", "3Desktop:tar-0:1.13.25-14.RHEL3.ia64", "3Desktop:tar-0:1.13.25-14.RHEL3.ppc", "3Desktop:tar-0:1.13.25-14.RHEL3.s390", "3Desktop:tar-0:1.13.25-14.RHEL3.s390x", "3Desktop:tar-0:1.13.25-14.RHEL3.src", "3Desktop:tar-0:1.13.25-14.RHEL3.x86_64", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "3ES:tar-0:1.13.25-14.RHEL3.i386", "3ES:tar-0:1.13.25-14.RHEL3.ia64", "3ES:tar-0:1.13.25-14.RHEL3.ppc", "3ES:tar-0:1.13.25-14.RHEL3.s390", "3ES:tar-0:1.13.25-14.RHEL3.s390x", "3ES:tar-0:1.13.25-14.RHEL3.src", "3ES:tar-0:1.13.25-14.RHEL3.x86_64", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "3WS:tar-0:1.13.25-14.RHEL3.i386", "3WS:tar-0:1.13.25-14.RHEL3.ia64", "3WS:tar-0:1.13.25-14.RHEL3.ppc", "3WS:tar-0:1.13.25-14.RHEL3.s390", "3WS:tar-0:1.13.25-14.RHEL3.s390x", "3WS:tar-0:1.13.25-14.RHEL3.src", "3WS:tar-0:1.13.25-14.RHEL3.x86_64", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2006:0195" } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tar archive path traversal issue" } ] }
RHSA-2006:0195
Vulnerability from csaf_redhat
Published
2006-02-21 14:35
Modified
2025-09-10 13:38
Summary
Red Hat Security Advisory: tar security update
Notes
Topic
An updated tar package that fixes a path traversal flaw is now available.
This update has been rated as having low security impact by the Red Hat
Security Response Team.
Details
The GNU tar program saves many files together in one archive and can
restore individual files (or all of the files) from that archive.
In 2002, a path traversal flaw was found in the way GNU tar extracted
archives. A malicious user could create a tar archive that could write to
arbitrary files to which the user running GNU tar has write access
(CVE-2002-0399). Red Hat included a backported security patch to correct
this issue in Red Hat Enterprise Linux 3, and an erratum for Red Hat
Enterprise Linux 2.1 users was issued.
During internal testing, we discovered that our backported security patch
contained an incorrect optimization and therefore was not sufficient to
completely correct this vulnerability. The Common Vulnerabilities and
Exposures project (cve.mitre.org) assigned the name CVE-2005-1918 to this
issue.
Users of tar should upgrade to this updated package, which contains a
replacement backported patch to correct this issue.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An updated tar package that fixes a path traversal flaw is now available.\n\nThis update has been rated as having low security impact by the Red Hat\nSecurity Response Team.", "title": "Topic" }, { "category": "general", "text": "The GNU tar program saves many files together in one archive and can\nrestore individual files (or all of the files) from that archive. \n\nIn 2002, a path traversal flaw was found in the way GNU tar extracted\narchives. A malicious user could create a tar archive that could write to\narbitrary files to which the user running GNU tar has write access\n(CVE-2002-0399). Red Hat included a backported security patch to correct\nthis issue in Red Hat Enterprise Linux 3, and an erratum for Red Hat\nEnterprise Linux 2.1 users was issued.\n\nDuring internal testing, we discovered that our backported security patch\ncontained an incorrect optimization and therefore was not sufficient to\ncompletely correct this vulnerability. The Common Vulnerabilities and\nExposures project (cve.mitre.org) assigned the name CVE-2005-1918 to this\nissue.\n\nUsers of tar should upgrade to this updated package, which contains a\nreplacement backported patch to correct this issue.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2006:0195", "url": "https://access.redhat.com/errata/RHSA-2006:0195" }, { "category": "external", "summary": "140589", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=140589" }, { "category": "external", "summary": "140598", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=140598" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0195.json" } ], "title": "Red Hat Security Advisory: tar security update", "tracking": { "current_release_date": "2025-09-10T13:38:18+00:00", "generator": { "date": "2025-09-10T13:38:18+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.7" } }, "id": "RHSA-2006:0195", "initial_release_date": "2006-02-21T14:35:00+00:00", "revision_history": [ { "date": "2006-02-21T14:35:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2006-02-21T00:00:00+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-09-10T13:38:18+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AS version 3", "product": { "name": "Red Hat Enterprise Linux AS version 3", "product_id": "3AS", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:3::as" } } }, { "category": "product_name", "name": "Red Hat Desktop version 3", "product": { "name": "Red Hat Desktop version 3", "product_id": "3Desktop", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:3::desktop" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ES version 3", "product": { "name": "Red Hat Enterprise Linux ES version 3", "product_id": "3ES", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:3::es" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux WS version 3", "product": { "name": "Red Hat Enterprise Linux WS version 3", "product_id": "3WS", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:3::ws" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "product": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "product_id": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-14.RHEL3?arch=ia64" } } }, { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.ia64", "product": { "name": "tar-0:1.13.25-14.RHEL3.ia64", "product_id": "tar-0:1.13.25-14.RHEL3.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=ia64" } } } ], "category": "architecture", "name": "ia64" }, { "branches": [ { "category": "product_version", "name": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "product": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "product_id": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-14.RHEL3?arch=x86_64" } } }, { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.x86_64", "product": { "name": "tar-0:1.13.25-14.RHEL3.x86_64", "product_id": "tar-0:1.13.25-14.RHEL3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "product": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "product_id": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-14.RHEL3?arch=i386" } } }, { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.i386", "product": { "name": "tar-0:1.13.25-14.RHEL3.i386", "product_id": "tar-0:1.13.25-14.RHEL3.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=i386" } } } ], "category": "architecture", "name": "i386" }, { "branches": [ { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.src", "product": { "name": "tar-0:1.13.25-14.RHEL3.src", "product_id": "tar-0:1.13.25-14.RHEL3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "product": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "product_id": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-14.RHEL3?arch=ppc" } } }, { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.ppc", "product": { "name": "tar-0:1.13.25-14.RHEL3.ppc", "product_id": "tar-0:1.13.25-14.RHEL3.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=ppc" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "product": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "product_id": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-14.RHEL3?arch=s390x" } } }, { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.s390x", "product": { "name": "tar-0:1.13.25-14.RHEL3.s390x", "product_id": "tar-0:1.13.25-14.RHEL3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "product": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "product_id": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar-debuginfo@1.13.25-14.RHEL3?arch=s390" } } }, { "category": "product_version", "name": "tar-0:1.13.25-14.RHEL3.s390", "product": { "name": "tar-0:1.13.25-14.RHEL3.s390", "product_id": "tar-0:1.13.25-14.RHEL3.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/tar@1.13.25-14.RHEL3?arch=s390" } } } ], "category": "architecture", "name": "s390" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.src as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.src" }, "product_reference": "tar-0:1.13.25-14.RHEL3.src", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.src as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.src" }, "product_reference": "tar-0:1.13.25-14.RHEL3.src", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.src as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.src" }, "product_reference": "tar-0:1.13.25-14.RHEL3.src", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.src as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.src" }, "product_reference": "tar-0:1.13.25-14.RHEL3.src", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.i386 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.i386" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.i386", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.ia64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.ppc" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.s390" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.s390x" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64" }, "product_reference": "tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "relates_to_product_reference": "3WS" } ] }, "vulnerabilities": [ { "cve": "CVE-2005-1918", "discovery_date": "2003-06-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "140589" } ], "notes": [ { "category": "description", "text": "The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an \"incorrect optimization\" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving \"/../\" sequences with a leading \"/\".", "title": "Vulnerability description" }, { "category": "summary", "text": "tar archive path traversal issue", "title": "Vulnerability summary" } ], "product_status": { "fixed": [ "3AS:tar-0:1.13.25-14.RHEL3.i386", "3AS:tar-0:1.13.25-14.RHEL3.ia64", "3AS:tar-0:1.13.25-14.RHEL3.ppc", "3AS:tar-0:1.13.25-14.RHEL3.s390", "3AS:tar-0:1.13.25-14.RHEL3.s390x", "3AS:tar-0:1.13.25-14.RHEL3.src", "3AS:tar-0:1.13.25-14.RHEL3.x86_64", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "3Desktop:tar-0:1.13.25-14.RHEL3.i386", "3Desktop:tar-0:1.13.25-14.RHEL3.ia64", "3Desktop:tar-0:1.13.25-14.RHEL3.ppc", "3Desktop:tar-0:1.13.25-14.RHEL3.s390", "3Desktop:tar-0:1.13.25-14.RHEL3.s390x", "3Desktop:tar-0:1.13.25-14.RHEL3.src", "3Desktop:tar-0:1.13.25-14.RHEL3.x86_64", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "3ES:tar-0:1.13.25-14.RHEL3.i386", "3ES:tar-0:1.13.25-14.RHEL3.ia64", "3ES:tar-0:1.13.25-14.RHEL3.ppc", "3ES:tar-0:1.13.25-14.RHEL3.s390", "3ES:tar-0:1.13.25-14.RHEL3.s390x", "3ES:tar-0:1.13.25-14.RHEL3.src", "3ES:tar-0:1.13.25-14.RHEL3.x86_64", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "3WS:tar-0:1.13.25-14.RHEL3.i386", "3WS:tar-0:1.13.25-14.RHEL3.ia64", "3WS:tar-0:1.13.25-14.RHEL3.ppc", "3WS:tar-0:1.13.25-14.RHEL3.s390", "3WS:tar-0:1.13.25-14.RHEL3.s390x", "3WS:tar-0:1.13.25-14.RHEL3.src", "3WS:tar-0:1.13.25-14.RHEL3.x86_64", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2005-1918" }, { "category": "external", "summary": "RHBZ#140589", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=140589" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2005-1918", "url": "https://www.cve.org/CVERecord?id=CVE-2005-1918" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-1918", "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-1918" } ], "release_date": "2003-07-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2006-02-21T14:35:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied. Use Red Hat\nNetwork to download and update your packages. To launch the Red Hat\nUpdate Agent, use the following command:\n\n up2date\n\nFor information on how to install packages manually, refer to the\nfollowing Web page for the System Administration or Customization\nguide specific to your system:\n\n http://www.redhat.com/docs/manuals/enterprise/", "product_ids": [ "3AS:tar-0:1.13.25-14.RHEL3.i386", "3AS:tar-0:1.13.25-14.RHEL3.ia64", "3AS:tar-0:1.13.25-14.RHEL3.ppc", "3AS:tar-0:1.13.25-14.RHEL3.s390", "3AS:tar-0:1.13.25-14.RHEL3.s390x", "3AS:tar-0:1.13.25-14.RHEL3.src", "3AS:tar-0:1.13.25-14.RHEL3.x86_64", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3AS:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "3Desktop:tar-0:1.13.25-14.RHEL3.i386", "3Desktop:tar-0:1.13.25-14.RHEL3.ia64", "3Desktop:tar-0:1.13.25-14.RHEL3.ppc", "3Desktop:tar-0:1.13.25-14.RHEL3.s390", "3Desktop:tar-0:1.13.25-14.RHEL3.s390x", "3Desktop:tar-0:1.13.25-14.RHEL3.src", "3Desktop:tar-0:1.13.25-14.RHEL3.x86_64", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3Desktop:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "3ES:tar-0:1.13.25-14.RHEL3.i386", "3ES:tar-0:1.13.25-14.RHEL3.ia64", "3ES:tar-0:1.13.25-14.RHEL3.ppc", "3ES:tar-0:1.13.25-14.RHEL3.s390", "3ES:tar-0:1.13.25-14.RHEL3.s390x", "3ES:tar-0:1.13.25-14.RHEL3.src", "3ES:tar-0:1.13.25-14.RHEL3.x86_64", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3ES:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64", "3WS:tar-0:1.13.25-14.RHEL3.i386", "3WS:tar-0:1.13.25-14.RHEL3.ia64", "3WS:tar-0:1.13.25-14.RHEL3.ppc", "3WS:tar-0:1.13.25-14.RHEL3.s390", "3WS:tar-0:1.13.25-14.RHEL3.s390x", "3WS:tar-0:1.13.25-14.RHEL3.src", "3WS:tar-0:1.13.25-14.RHEL3.x86_64", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.i386", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.ia64", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.ppc", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.s390", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.s390x", "3WS:tar-debuginfo-0:1.13.25-14.RHEL3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2006:0195" } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "tar archive path traversal issue" } ] }
opensuse-su-2024:11422-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
tar-1.34-2.2 on GA media
Notes
Title of the patch
tar-1.34-2.2 on GA media
Description of the patch
These are all security issues fixed in the tar-1.34-2.2 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-11422
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "tar-1.34-2.2 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the tar-1.34-2.2 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-11422", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11422-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2001-1267 page", "url": "https://www.suse.com/security/cve/CVE-2001-1267/" }, { "category": "self", "summary": "SUSE CVE CVE-2002-0399 page", "url": "https://www.suse.com/security/cve/CVE-2002-0399/" }, { "category": "self", "summary": "SUSE CVE CVE-2005-1918 page", "url": "https://www.suse.com/security/cve/CVE-2005-1918/" }, { "category": "self", "summary": "SUSE CVE CVE-2006-0300 page", "url": "https://www.suse.com/security/cve/CVE-2006-0300/" }, { "category": "self", "summary": "SUSE CVE CVE-2006-6097 page", "url": "https://www.suse.com/security/cve/CVE-2006-6097/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-20482 page", "url": "https://www.suse.com/security/cve/CVE-2018-20482/" }, { "category": "self", "summary": "SUSE CVE CVE-2019-9923 page", "url": "https://www.suse.com/security/cve/CVE-2019-9923/" } ], "title": "tar-1.34-2.2 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:11422-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "tar-1.34-2.2.aarch64", "product": { "name": "tar-1.34-2.2.aarch64", "product_id": "tar-1.34-2.2.aarch64" } }, { "category": "product_version", "name": "tar-backup-scripts-1.34-2.2.aarch64", "product": { "name": "tar-backup-scripts-1.34-2.2.aarch64", "product_id": "tar-backup-scripts-1.34-2.2.aarch64" } }, { "category": "product_version", "name": "tar-doc-1.34-2.2.aarch64", "product": { "name": "tar-doc-1.34-2.2.aarch64", "product_id": "tar-doc-1.34-2.2.aarch64" } }, { "category": "product_version", "name": "tar-lang-1.34-2.2.aarch64", "product": { "name": "tar-lang-1.34-2.2.aarch64", "product_id": "tar-lang-1.34-2.2.aarch64" } }, { "category": "product_version", "name": "tar-rmt-1.34-2.2.aarch64", "product": { "name": "tar-rmt-1.34-2.2.aarch64", "product_id": "tar-rmt-1.34-2.2.aarch64" } }, { "category": "product_version", "name": "tar-tests-1.34-2.2.aarch64", "product": { "name": "tar-tests-1.34-2.2.aarch64", "product_id": "tar-tests-1.34-2.2.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "tar-1.34-2.2.ppc64le", "product": { "name": "tar-1.34-2.2.ppc64le", "product_id": "tar-1.34-2.2.ppc64le" } }, { "category": "product_version", "name": "tar-backup-scripts-1.34-2.2.ppc64le", "product": { "name": "tar-backup-scripts-1.34-2.2.ppc64le", "product_id": "tar-backup-scripts-1.34-2.2.ppc64le" } }, { "category": "product_version", "name": "tar-doc-1.34-2.2.ppc64le", "product": { "name": "tar-doc-1.34-2.2.ppc64le", "product_id": "tar-doc-1.34-2.2.ppc64le" } }, { "category": "product_version", "name": "tar-lang-1.34-2.2.ppc64le", "product": { "name": "tar-lang-1.34-2.2.ppc64le", "product_id": "tar-lang-1.34-2.2.ppc64le" } }, { "category": "product_version", "name": "tar-rmt-1.34-2.2.ppc64le", "product": { "name": "tar-rmt-1.34-2.2.ppc64le", "product_id": "tar-rmt-1.34-2.2.ppc64le" } }, { "category": "product_version", "name": "tar-tests-1.34-2.2.ppc64le", "product": { "name": "tar-tests-1.34-2.2.ppc64le", "product_id": "tar-tests-1.34-2.2.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "tar-1.34-2.2.s390x", "product": { "name": "tar-1.34-2.2.s390x", "product_id": "tar-1.34-2.2.s390x" } }, { "category": "product_version", "name": "tar-backup-scripts-1.34-2.2.s390x", "product": { "name": "tar-backup-scripts-1.34-2.2.s390x", "product_id": "tar-backup-scripts-1.34-2.2.s390x" } }, { "category": "product_version", "name": "tar-doc-1.34-2.2.s390x", "product": { "name": "tar-doc-1.34-2.2.s390x", "product_id": "tar-doc-1.34-2.2.s390x" } }, { "category": "product_version", "name": "tar-lang-1.34-2.2.s390x", "product": { "name": "tar-lang-1.34-2.2.s390x", "product_id": "tar-lang-1.34-2.2.s390x" } }, { "category": "product_version", "name": "tar-rmt-1.34-2.2.s390x", "product": { "name": "tar-rmt-1.34-2.2.s390x", "product_id": "tar-rmt-1.34-2.2.s390x" } }, { "category": "product_version", "name": "tar-tests-1.34-2.2.s390x", "product": { "name": "tar-tests-1.34-2.2.s390x", "product_id": "tar-tests-1.34-2.2.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "tar-1.34-2.2.x86_64", "product": { "name": "tar-1.34-2.2.x86_64", "product_id": "tar-1.34-2.2.x86_64" } }, { "category": "product_version", "name": "tar-backup-scripts-1.34-2.2.x86_64", "product": { "name": "tar-backup-scripts-1.34-2.2.x86_64", "product_id": "tar-backup-scripts-1.34-2.2.x86_64" } }, { "category": "product_version", "name": "tar-doc-1.34-2.2.x86_64", "product": { "name": "tar-doc-1.34-2.2.x86_64", "product_id": "tar-doc-1.34-2.2.x86_64" } }, { "category": "product_version", "name": "tar-lang-1.34-2.2.x86_64", "product": { "name": "tar-lang-1.34-2.2.x86_64", "product_id": "tar-lang-1.34-2.2.x86_64" } }, { "category": "product_version", "name": "tar-rmt-1.34-2.2.x86_64", "product": { "name": "tar-rmt-1.34-2.2.x86_64", "product_id": "tar-rmt-1.34-2.2.x86_64" } }, { "category": "product_version", "name": "tar-tests-1.34-2.2.x86_64", "product": { "name": "tar-tests-1.34-2.2.x86_64", "product_id": "tar-tests-1.34-2.2.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "tar-1.34-2.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-1.34-2.2.aarch64" }, "product_reference": "tar-1.34-2.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-1.34-2.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le" }, "product_reference": "tar-1.34-2.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-1.34-2.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-1.34-2.2.s390x" }, "product_reference": "tar-1.34-2.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-1.34-2.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-1.34-2.2.x86_64" }, "product_reference": "tar-1.34-2.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-backup-scripts-1.34-2.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64" }, "product_reference": "tar-backup-scripts-1.34-2.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-backup-scripts-1.34-2.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le" }, "product_reference": "tar-backup-scripts-1.34-2.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-backup-scripts-1.34-2.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x" }, "product_reference": "tar-backup-scripts-1.34-2.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-backup-scripts-1.34-2.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64" }, "product_reference": "tar-backup-scripts-1.34-2.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-doc-1.34-2.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64" }, "product_reference": "tar-doc-1.34-2.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-doc-1.34-2.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le" }, "product_reference": "tar-doc-1.34-2.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-doc-1.34-2.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x" }, "product_reference": "tar-doc-1.34-2.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-doc-1.34-2.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64" }, "product_reference": "tar-doc-1.34-2.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-lang-1.34-2.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64" }, "product_reference": "tar-lang-1.34-2.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-lang-1.34-2.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le" }, "product_reference": "tar-lang-1.34-2.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-lang-1.34-2.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x" }, "product_reference": "tar-lang-1.34-2.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-lang-1.34-2.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64" }, "product_reference": "tar-lang-1.34-2.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-rmt-1.34-2.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64" }, "product_reference": "tar-rmt-1.34-2.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-rmt-1.34-2.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le" }, "product_reference": "tar-rmt-1.34-2.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-rmt-1.34-2.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x" }, "product_reference": "tar-rmt-1.34-2.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-rmt-1.34-2.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64" }, "product_reference": "tar-rmt-1.34-2.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-tests-1.34-2.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64" }, "product_reference": "tar-tests-1.34-2.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-tests-1.34-2.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le" }, "product_reference": "tar-tests-1.34-2.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-tests-1.34-2.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x" }, "product_reference": "tar-tests-1.34-2.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "tar-tests-1.34-2.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64" }, "product_reference": "tar-tests-1.34-2.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2001-1267", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2001-1267" } ], "notes": [ { "category": "general", "text": "Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot).", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:tar-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2001-1267", "url": "https://www.suse.com/security/cve/CVE-2001-1267" }, { "category": "external", "summary": "SUSE Bug 1203750 for CVE-2001-1267", "url": "https://bugzilla.suse.com/1203750" }, { "category": "external", "summary": "SUSE Bug 299738 for CVE-2001-1267", "url": "https://bugzilla.suse.com/299738" }, { "category": "external", "summary": "SUSE Bug 299745 for CVE-2001-1267", "url": "https://bugzilla.suse.com/299745" }, { "category": "external", "summary": "SUSE Bug 299747 for CVE-2001-1267", "url": "https://bugzilla.suse.com/299747" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:tar-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2001-1267" }, { "cve": "CVE-2002-0399", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2002-0399" } ], "notes": [ { "category": "general", "text": "Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary files during archive extraction via a (1) \"/..\" or (2) \"./..\" string, which removes the leading slash but leaves the \"..\", a variant of CVE-2001-1267.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:tar-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2002-0399", "url": "https://www.suse.com/security/cve/CVE-2002-0399" }, { "category": "external", "summary": "SUSE Bug 145081 for CVE-2002-0399", "url": "https://bugzilla.suse.com/145081" }, { "category": "external", "summary": "SUSE Bug 299738 for CVE-2002-0399", "url": "https://bugzilla.suse.com/299738" }, { "category": "external", "summary": "SUSE Bug 299745 for CVE-2002-0399", "url": "https://bugzilla.suse.com/299745" }, { "category": "external", "summary": "SUSE Bug 299747 for CVE-2002-0399", "url": "https://bugzilla.suse.com/299747" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:tar-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2002-0399" }, { "cve": "CVE-2005-1918", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2005-1918" } ], "notes": [ { "category": "general", "text": "The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an \"incorrect optimization\" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving \"/../\" sequences with a leading \"/\".", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:tar-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2005-1918", "url": "https://www.suse.com/security/cve/CVE-2005-1918" }, { "category": "external", "summary": "SUSE Bug 145081 for CVE-2005-1918", "url": "https://bugzilla.suse.com/145081" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:tar-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2005-1918" }, { "cve": "CVE-2006-0300", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2006-0300" } ], "notes": [ { "category": "general", "text": "Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:tar-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2006-0300", "url": "https://www.suse.com/security/cve/CVE-2006-0300" }, { "category": "external", "summary": "SUSE Bug 151516 for CVE-2006-0300", "url": "https://bugzilla.suse.com/151516" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:tar-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2006-0300" }, { "cve": "CVE-2006-6097", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2006-6097" } ], "notes": [ { "category": "general", "text": "GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:tar-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2006-6097", "url": "https://www.suse.com/security/cve/CVE-2006-6097" }, { "category": "external", "summary": "SUSE Bug 223185 for CVE-2006-6097", "url": "https://bugzilla.suse.com/223185" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:tar-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2006-6097" }, { "cve": "CVE-2018-20482", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-20482" } ], "notes": [ { "category": "general", "text": "GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed to be archived by a different user\u0027s process (e.g., a system backup running as root).", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:tar-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-20482", "url": "https://www.suse.com/security/cve/CVE-2018-20482" }, { "category": "external", "summary": "SUSE Bug 1120610 for CVE-2018-20482", "url": "https://bugzilla.suse.com/1120610" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:tar-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:tar-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2018-20482" }, { "cve": "CVE-2019-9923", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-9923" } ], "notes": [ { "category": "general", "text": "pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:tar-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2019-9923", "url": "https://www.suse.com/security/cve/CVE-2019-9923" }, { "category": "external", "summary": "SUSE Bug 1130496 for CVE-2019-9923", "url": "https://bugzilla.suse.com/1130496" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:tar-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:tar-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64", "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le", "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x", "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2019-9923" } ] }
ghsa-vf44-2j68-pjgj
Vulnerability from github
Published
2022-05-03 03:14
Modified
2022-05-03 03:14
VLAI Severity ?
Details
The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".
{ "affected": [], "aliases": [ "CVE-2005-1918" ], "database_specific": { "cwe_ids": [ "CWE-22" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2005-12-31T05:00:00Z", "severity": "LOW" }, "details": "The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an \"incorrect optimization\" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving \"/../\" sequences with a leading \"/\".", "id": "GHSA-vf44-2j68-pjgj", "modified": "2022-05-03T03:14:12Z", "published": "2022-05-03T03:14:12Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-1918" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589" }, { "type": "WEB", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9946" }, { "type": "WEB", "url": "http://secunia.com/advisories/18988" }, { "type": "WEB", "url": "http://secunia.com/advisories/19130" }, { "type": "WEB", "url": "http://secunia.com/advisories/19183" }, { "type": "WEB", "url": "http://secunia.com/advisories/20397" }, { "type": "WEB", "url": "http://securitytracker.com/id?1015655" }, { "type": "WEB", "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm" }, { "type": "WEB", "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html" }, { "type": "WEB", "url": "http://www.redhat.com/support/errata/RHSA-2006-0195.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/archive/1/430297/100/0/threaded" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/5834" } ], "schema_version": "1.4.0", "severity": [] }
fkie_cve-2005-1918
Vulnerability from fkie_nvd
Published
2005-12-31 05:00
Modified
2025-04-03 01:03
Severity ?
Summary
The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".
References
Impacted products
Vendor | Product | Version | |
---|---|---|---|
gnu | tar | 1.13.25 | |
redhat | enterprise_linux | 2.1 | |
redhat | enterprise_linux | 2.1 | |
redhat | enterprise_linux | 2.1 | |
redhat | enterprise_linux | 2.1 | |
redhat | enterprise_linux | 2.1 | |
redhat | enterprise_linux | 2.1 | |
redhat | enterprise_linux | 3.0 | |
redhat | enterprise_linux | 3.0 | |
redhat | enterprise_linux | 3.0 | |
redhat | enterprise_linux_desktop | 3.0 | |
redhat | linux_advanced_workstation | 2.1 | |
redhat | linux_advanced_workstation | 2.1 |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:gnu:tar:1.13.25:*:*:*:*:*:*:*", "matchCriteriaId": "60CD7558-833D-473B-99A4-854FB6CC6C9A", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*", "matchCriteriaId": "2641EE56-6F9D-400B-B456-877F4DA79B10", "vulnerable": true }, { "criteria": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*", "matchCriteriaId": "A4A9461E-C117-42EC-9F14-DF2A82BA7C5D", "vulnerable": true }, { "criteria": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*", "matchCriteriaId": "E0B458EA-495E-40FA-9379-C03757F7B1EE", "vulnerable": true }, { "criteria": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*", "matchCriteriaId": "409E324A-C040-494F-A026-9DCAE01C07F8", "vulnerable": true }, { "criteria": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*", "matchCriteriaId": "1728AB5D-55A9-46B0-A412-6F7263CAEB5A", "vulnerable": true }, { "criteria": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*", "matchCriteriaId": "6474B775-C893-491F-A074-802AFB1FEDD8", "vulnerable": true }, { "criteria": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*", "matchCriteriaId": "81B543F9-C209-46C2-B0AE-E14818A6992E", "vulnerable": true }, { "criteria": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*", "matchCriteriaId": "EC79FF22-2664-4C40-B0B3-6D23B5F45162", "vulnerable": true }, { "criteria": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*", "matchCriteriaId": "DB89C970-DE94-4E09-A90A-077DB83AD156", "vulnerable": true }, { "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*", "matchCriteriaId": "AF3BBBC3-3EF9-4E24-9DE2-627E172A5473", "vulnerable": true }, { "criteria": "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*", "matchCriteriaId": "84A50ED3-FD0D-4038-B3E7-CC65D166C968", "vulnerable": true }, { "criteria": "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*", "matchCriteriaId": "8DBD9D3C-40AB-449D-A9A8-A09DF2DEDB96", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an \"incorrect optimization\" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving \"/../\" sequences with a leading \"/\"." } ], "id": "CVE-2005-1918", "lastModified": "2025-04-03T01:03:51.193", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "LOW", "cvssData": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.6, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 4.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true } ] }, "published": "2005-12-31T05:00:00.000", "references": [ { "source": "secalert@redhat.com", "url": "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc" }, { "source": "secalert@redhat.com", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://secunia.com/advisories/18988" }, { "source": "secalert@redhat.com", "tags": [ "Vendor Advisory" ], "url": "http://secunia.com/advisories/19130" }, { "source": "secalert@redhat.com", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://secunia.com/advisories/19183" }, { "source": "secalert@redhat.com", "tags": [ "Vendor Advisory" ], "url": "http://secunia.com/advisories/20397" }, { "source": "secalert@redhat.com", "tags": [ "Patch" ], "url": "http://securitytracker.com/id?1015655" }, { "source": "secalert@redhat.com", "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm" }, { "source": "secalert@redhat.com", "tags": [ "Vendor Advisory" ], "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html" }, { "source": "secalert@redhat.com", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://www.redhat.com/support/errata/RHSA-2006-0195.html" }, { "source": "secalert@redhat.com", "url": "http://www.securityfocus.com/archive/1/430297/100/0/threaded" }, { "source": "secalert@redhat.com", "tags": [ "Patch" ], "url": "http://www.securityfocus.com/bid/5834" }, { "source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589" }, { "source": "secalert@redhat.com", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9946" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://secunia.com/advisories/18988" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "http://secunia.com/advisories/19130" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://secunia.com/advisories/19183" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "http://secunia.com/advisories/20397" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch" ], "url": "http://securitytracker.com/id?1015655" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://www.redhat.com/support/errata/RHSA-2006-0195.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/430297/100/0/threaded" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Patch" ], "url": "http://www.securityfocus.com/bid/5834" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9946" } ], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Deferred", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-22" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
gsd-2005-1918
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".
Aliases
Aliases
{ "GSD": { "alias": "CVE-2005-1918", "description": "The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an \"incorrect optimization\" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving \"/../\" sequences with a leading \"/\".", "id": "GSD-2005-1918", "references": [ "https://www.suse.com/security/cve/CVE-2005-1918.html", "https://access.redhat.com/errata/RHSA-2006:0195" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2005-1918" ], "details": "The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an \"incorrect optimization\" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving \"/../\" sequences with a leading \"/\".", "id": "GSD-2005-1918", "modified": "2023-12-13T01:20:11.195962Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2005-1918", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an \"incorrect optimization\" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving \"/../\" sequences with a leading \"/\"." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "oval:org.mitre.oval:def:9946", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9946" }, { "name": "5834", "refsource": "BID", "url": "http://www.securityfocus.com/bid/5834" }, { "name": "SUSE-SR:2006:005", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html" }, { "name": "1015655", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1015655" }, { "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm", "refsource": "CONFIRM", "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm" }, { "name": "18988", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/18988" }, { "name": "19130", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19130" }, { "name": "RHSA-2006:0195", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2006-0195.html" }, { "name": "20397", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20397" }, { "name": "FLSA:183571-1", "refsource": "FEDORA", "url": "http://www.securityfocus.com/archive/1/430297/100/0/threaded" }, { "name": "20060301-01-U", "refsource": "SGI", "url": "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc" }, { "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589" }, { "name": "19183", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19183" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:gnu:tar:1.13.25:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2005-1918" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an \"incorrect optimization\" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving \"/../\" sequences with a leading \"/\"." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-22" } ] } ] }, "references": { "reference_data": [ { "name": "RHSA-2006:0195", "refsource": "REDHAT", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://www.redhat.com/support/errata/RHSA-2006-0195.html" }, { "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589", "refsource": "CONFIRM", "tags": [], "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589" }, { "name": "5834", "refsource": "BID", "tags": [ "Patch" ], "url": "http://www.securityfocus.com/bid/5834" }, { "name": "1015655", "refsource": "SECTRACK", "tags": [ "Patch" ], "url": "http://securitytracker.com/id?1015655" }, { "name": "18988", "refsource": "SECUNIA", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://secunia.com/advisories/18988" }, { "name": "20060301-01-U", "refsource": "SGI", "tags": [], "url": "ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc" }, { "name": "SUSE-SR:2006:005", "refsource": "SUSE", "tags": [ "Vendor Advisory" ], "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html" }, { "name": "19130", "refsource": "SECUNIA", "tags": [ "Vendor Advisory" ], "url": "http://secunia.com/advisories/19130" }, { "name": "19183", "refsource": "SECUNIA", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://secunia.com/advisories/19183" }, { "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm", "refsource": "CONFIRM", "tags": [], "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm" }, { "name": "20397", "refsource": "SECUNIA", "tags": [ "Vendor Advisory" ], "url": "http://secunia.com/advisories/20397" }, { "name": "oval:org.mitre.oval:def:9946", "refsource": "OVAL", "tags": [], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9946" }, { "name": "FLSA:183571-1", "refsource": "FEDORA", "tags": [], "url": "http://www.securityfocus.com/archive/1/430297/100/0/threaded" } ] } }, "impact": { "baseMetricV2": { "cvssV2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.6, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 4.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "LOW", "userInteractionRequired": true } }, "lastModifiedDate": "2018-10-19T15:32Z", "publishedDate": "2005-12-31T05:00Z" } } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…