ISOMAN

CVE

CVE-2011-5325

Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlink.

Severity
HIGH
CVSS
7.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource

References

  1. http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html
  2. http://seclists.org/fulldisclosure/2019/Jun/18
  3. http://seclists.org/fulldisclosure/2020/Aug/20
  4. http://www.openwall.com/lists/oss-security/2015/10/21/7
  5. https://bugzilla.redhat.com/show_bug.cgi?id=1274215
  6. https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html
  7. https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html
  8. https://seclists.org/bugtraq/2019/Jun/14
  9. https://usn.ubuntu.com/3935-1/
  10. http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html
  11. http://seclists.org/fulldisclosure/2019/Jun/18
  12. http://seclists.org/fulldisclosure/2020/Aug/20
  13. http://www.openwall.com/lists/oss-security/2015/10/21/7
  14. https://bugzilla.redhat.com/show_bug.cgi?id=1274215
  15. https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html
  16. https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html
  17. https://seclists.org/bugtraq/2019/Jun/14
  18. https://usn.ubuntu.com/3935-1/