Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2006-0300 (GCVE-0-2006-0300)
Vulnerability from cvelistv5 – Published: 2006-02-24 00:00 – Updated: 2024-08-07 16:34
VLAI
EPSS
Summary
Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
43 references
Date Public
2006-02-20 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:34:13.194Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "2006-0010",
"tags": [
"vendor-advisory",
"x_refsource_TRUSTIX",
"x_transferred"
],
"url": "http://www.trustix.org/errata/2006/0010"
},
{
"name": "FLSA:183571-2",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/430299/100/0/threaded"
},
{
"name": "1015705",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015705"
},
{
"name": "oval:org.mitre.oval:def:5978",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5978"
},
{
"name": "18999",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18999"
},
{
"name": "24966",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/24966"
},
{
"name": "SUSE-SR:2006:005",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
},
{
"name": "TA07-072A",
"tags": [
"third-party-advisory",
"x_refsource_CERT",
"x_transferred"
],
"url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
},
{
"name": "OpenPKG-SA-2006.006",
"tags": [
"vendor-advisory",
"x_refsource_OPENPKG",
"x_transferred"
],
"url": "http://www.openpkg.org/security/OpenPKG-SA-2006.006-tar.html"
},
{
"name": "18976",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18976"
},
{
"name": "USN-257-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/257-1/"
},
{
"name": "23371",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23371"
},
{
"name": "19236",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19236"
},
{
"name": "APPLE-SA-2007-03-13",
"tags": [
"vendor-advisory",
"x_refsource_APPLE",
"x_transferred"
],
"url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
},
{
"name": "DSA-987",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2006/dsa-987"
},
{
"name": "RHSA-2006:0232",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2006-0232.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://docs.info.apple.com/article.html?artnum=305391"
},
{
"name": "19093",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19093"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://docs.info.apple.com/article.html?artnum=305214"
},
{
"name": "543",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/543"
},
{
"name": "480",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/480"
},
{
"name": "MDKSA-2006:046",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:046"
},
{
"name": "19152",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19152"
},
{
"name": "[Bug-tar] 20060220 tar 1.15.90 released",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://lists.gnu.org/archive/html/bug-tar/2006-02/msg00051.html"
},
{
"name": "241646",
"tags": [
"vendor-advisory",
"x_refsource_SUNALERT",
"x_transferred"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-241646-1"
},
{
"name": "18973",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18973"
},
{
"name": "TA07-109A",
"tags": [
"third-party-advisory",
"x_refsource_CERT",
"x_transferred"
],
"url": "http://www.us-cert.gov/cas/techalerts/TA07-109A.html"
},
{
"name": "16764",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16764"
},
{
"name": "ADV-2008-2518",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/2518"
},
{
"name": "19130",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19130"
},
{
"name": "oval:org.mitre.oval:def:5252",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5252"
},
{
"name": "oval:org.mitre.oval:def:9295",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9295"
},
{
"name": "20042",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/20042"
},
{
"name": "oval:org.mitre.oval:def:5993",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5993"
},
{
"name": "ADV-2006-0684",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0684"
},
{
"name": "19016",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19016"
},
{
"name": "ADV-2007-0930",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/0930"
},
{
"name": "gnu-tar-pax-headers-bo(24855)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24855"
},
{
"name": "APPLE-SA-2007-04-19",
"tags": [
"vendor-advisory",
"x_refsource_APPLE",
"x_transferred"
],
"url": "http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html"
},
{
"name": "ADV-2007-1470",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/1470"
},
{
"name": "oval:org.mitre.oval:def:6094",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6094"
},
{
"name": "24479",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/24479"
},
{
"name": "GLSA-200603-06",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200603-06.xml"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-02-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "2006-0010",
"tags": [
"vendor-advisory",
"x_refsource_TRUSTIX"
],
"url": "http://www.trustix.org/errata/2006/0010"
},
{
"name": "FLSA:183571-2",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://www.securityfocus.com/archive/1/430299/100/0/threaded"
},
{
"name": "1015705",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015705"
},
{
"name": "oval:org.mitre.oval:def:5978",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5978"
},
{
"name": "18999",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18999"
},
{
"name": "24966",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/24966"
},
{
"name": "SUSE-SR:2006:005",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
},
{
"name": "TA07-072A",
"tags": [
"third-party-advisory",
"x_refsource_CERT"
],
"url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
},
{
"name": "OpenPKG-SA-2006.006",
"tags": [
"vendor-advisory",
"x_refsource_OPENPKG"
],
"url": "http://www.openpkg.org/security/OpenPKG-SA-2006.006-tar.html"
},
{
"name": "18976",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18976"
},
{
"name": "USN-257-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/257-1/"
},
{
"name": "23371",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23371"
},
{
"name": "19236",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19236"
},
{
"name": "APPLE-SA-2007-03-13",
"tags": [
"vendor-advisory",
"x_refsource_APPLE"
],
"url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
},
{
"name": "DSA-987",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2006/dsa-987"
},
{
"name": "RHSA-2006:0232",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2006-0232.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://docs.info.apple.com/article.html?artnum=305391"
},
{
"name": "19093",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19093"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://docs.info.apple.com/article.html?artnum=305214"
},
{
"name": "543",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/543"
},
{
"name": "480",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/480"
},
{
"name": "MDKSA-2006:046",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:046"
},
{
"name": "19152",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19152"
},
{
"name": "[Bug-tar] 20060220 tar 1.15.90 released",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://lists.gnu.org/archive/html/bug-tar/2006-02/msg00051.html"
},
{
"name": "241646",
"tags": [
"vendor-advisory",
"x_refsource_SUNALERT"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-241646-1"
},
{
"name": "18973",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18973"
},
{
"name": "TA07-109A",
"tags": [
"third-party-advisory",
"x_refsource_CERT"
],
"url": "http://www.us-cert.gov/cas/techalerts/TA07-109A.html"
},
{
"name": "16764",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16764"
},
{
"name": "ADV-2008-2518",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/2518"
},
{
"name": "19130",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19130"
},
{
"name": "oval:org.mitre.oval:def:5252",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5252"
},
{
"name": "oval:org.mitre.oval:def:9295",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9295"
},
{
"name": "20042",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/20042"
},
{
"name": "oval:org.mitre.oval:def:5993",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5993"
},
{
"name": "ADV-2006-0684",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0684"
},
{
"name": "19016",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19016"
},
{
"name": "ADV-2007-0930",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/0930"
},
{
"name": "gnu-tar-pax-headers-bo(24855)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24855"
},
{
"name": "APPLE-SA-2007-04-19",
"tags": [
"vendor-advisory",
"x_refsource_APPLE"
],
"url": "http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html"
},
{
"name": "ADV-2007-1470",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/1470"
},
{
"name": "oval:org.mitre.oval:def:6094",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6094"
},
{
"name": "24479",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/24479"
},
{
"name": "GLSA-200603-06",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200603-06.xml"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2006-0300",
"datePublished": "2006-02-24T00:00:00.000Z",
"dateReserved": "2006-01-18T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:34:13.194Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2006-0300",
"date": "2026-05-29",
"epss": "0.18808",
"percentile": "0.95406"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2006-0300\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2006-02-24T00:02:00.000\",\"lastModified\":\"2026-04-16T00:27:16.627\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:H/Au:N/C:P/I:P/A:P\",\"baseScore\":5.1,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"HIGH\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":4.9,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":true,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:tar:1.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B87C1F89-63A8-4955-9C42-3B49EC1C1C78\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:tar:1.14.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA4A8A88-D915-455C-A226-A8AD8A9E887E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:tar:1.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7FE339D0-D585-440D-8BD4-5183833258F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:tar:1.15.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8B4A20D-AAD0-4857-AC0F-D221EBB08BFD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:tar:1.15.90:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9B46F22-B0FB-4F99-B44E-D34E0DD5D194\"}]}]}],\"references\":[{\"url\":\"http://docs.info.apple.com/article.html?artnum=305214\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://docs.info.apple.com/article.html?artnum=305391\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.gnu.org/archive/html/bug-tar/2006-02/msg00051.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/18973\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/18976\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/18999\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/19016\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/19093\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/19130\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/19152\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/19236\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/20042\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/24479\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/24966\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://securityreason.com/securityalert/480\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://securityreason.com/securityalert/543\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://securitytracker.com/id?1015705\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-26-241646-1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.debian.org/security/2006/dsa-987\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.gentoo.org/security/en/glsa/glsa-200603-06.xml\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.novell.com/linux/security/advisories/2006_05_sr.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.openpkg.org/security/OpenPKG-SA-2006.006-tar.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.osvdb.org/23371\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2006-0232.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/archive/1/430299/100/0/threaded\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/16764\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.trustix.org/errata/2006/0010\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.us-cert.gov/cas/techalerts/TA07-072A.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.us-cert.gov/cas/techalerts/TA07-109A.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.vupen.com/english/advisories/2006/0684\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.vupen.com/english/advisories/2007/0930\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.vupen.com/english/advisories/2007/1470\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.vupen.com/english/advisories/2008/2518\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:046\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/24855\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5252\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5978\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5993\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6094\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9295\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://usn.ubuntu.com/257-1/\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://docs.info.apple.com/article.html?artnum=305214\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://docs.info.apple.com/article.html?artnum=305391\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.gnu.org/archive/html/bug-tar/2006-02/msg00051.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/18973\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/18976\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/18999\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/19016\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/19093\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/19130\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/19152\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/19236\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/20042\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/24479\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/24966\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://securityreason.com/securityalert/480\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://securityreason.com/securityalert/543\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://securitytracker.com/id?1015705\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-26-241646-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2006/dsa-987\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.gentoo.org/security/en/glsa/glsa-200603-06.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.novell.com/linux/security/advisories/2006_05_sr.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openpkg.org/security/OpenPKG-SA-2006.006-tar.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/23371\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2006-0232.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/430299/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/16764\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.trustix.org/errata/2006/0010\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.us-cert.gov/cas/techalerts/TA07-072A.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.us-cert.gov/cas/techalerts/TA07-109A.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.vupen.com/english/advisories/2006/0684\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2007/0930\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2007/1470\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2008/2518\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:046\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/24855\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5252\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5978\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5993\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6094\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9295\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://usn.ubuntu.com/257-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
CERTA-2006-AVI-092
Vulnerability from certfr_avis - Published: 2006-02-24 - Updated: 2006-03-13None
Description
Une vulnérabilité a été découverte dans GNU tar. Cette vulnérabilité peut être exploitée par l'intermédiaire d'un fichier .tar malicieusement construit, afin d'exécuter des commandes arbitraires par le biais d'un débordement de mémoire.
Solution
La version 1.15.90 (alpha) corrige cette vulnérabilité.
GNU tar version 1.15.1 et versions antérieures.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |
|---|---|---|---|
|
|
|||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eGNU tar version 1.15.1 et versions ant\u00e9rieures.\u003c/p\u003e",
"content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans GNU tar. Cette vuln\u00e9rabilit\u00e9\npeut \u00eatre exploit\u00e9e par l\u0027interm\u00e9diaire d\u0027un fichier .tar malicieusement\nconstruit, afin d\u0027ex\u00e9cuter des commandes arbitraires par le biais d\u0027un\nd\u00e9bordement de m\u00e9moire.\n\n## Solution\n\nLa version 1.15.90 (alpha) corrige cette vuln\u00e9rabilit\u00e9.\n",
"cves": [
{
"name": "CVE-2006-0300",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-0300"
}
],
"initial_release_date": "2006-02-24T00:00:00",
"last_revision_date": "2006-03-13T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-987 du 07 mars 2006 :",
"url": "http://www.debian.org/security/dsa-987"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2006:046 du 21 f\u00e9vrier 2006 :",
"url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:046"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA 200603-06 du 10 mars 2006 :",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200603-06.xml"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-257-1 du 23 f\u00e9vrier 2006 :",
"url": "http://www.ubuntu.com/usn/usn-257-1"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SR:2006:005 du 03 mars 2006 :",
"url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2006:0232 du 01 mars 2006 :",
"url": "http://rhn.redhat.com/errata/RHSA-2006-0232.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 FreeBSD pour gtar du 03 mars 2006 :",
"url": "http://www.vuxml.org/freebsd/pkg-gtar.html"
}
],
"reference": "CERTA-2006-AVI-092",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2006-02-24T00:00:00.000000"
},
{
"description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 Mandriva, Ubuntu et RedHat.",
"revision_date": "2006-03-02T00:00:00.000000"
},
{
"description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 FreeBSD et Debian.",
"revision_date": "2006-03-08T00:00:00.000000"
},
{
"description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 SUSE et Gentoo.",
"revision_date": "2006-03-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
}
],
"summary": null,
"title": "Vuln\u00e9rabilit\u00e9 de GNU tar",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de mise \u00e0 jour de GNU tar",
"url": "http://lists.gnu.org/archive/html/bug-tar/2006-02/msg00051.html"
}
]
}
CERTA-2007-AVI-124
Vulnerability from certfr_avis - Published: 2007-03-14 - Updated: 2007-03-14
Plusieurs vulnérabilités affectent MacOS X. Les plus graves permettent à une personne malintentionnée d'exécuter du code arbitraire à distance.
Description
Plusieurs composants de MacOS X sont sujets à des vulnérabilités, les plus graves permettant à un attaquant distant d'exécuter du code arbitraire.
Les composants impactés sont : ColorSync (CVE-2007-0719), CoreGraphics, Crash Reporter (CVE-2007-0467), CUPS (CVE-2007-0720), Disk Images (CVE-2007-0721, CVE-2007-0722, CVE-2006-6061, CVE-2006-6062, CVE-2006-5679, CVE-2007-0229, CVE-2007-0267, CVE-2007-0299), DS Plug-Ins (CVE-2007-0723), Flash Player (CVE-2006-5330), GNU Tar (CVE-2006-0300, CVE-2006-6097), HFS (CVE-2007-0318), HID Family (CVE-2007-0724), ImageIO (CVE-2007-1071, CVE-2007-0733), Kernel (CVE-2006-5836, CVE-2006-6129, CVE-2006-6173), MySQL Server (CVE-2006-1516, CVE-2006-1517, CVE-2006-2753, CVE-2006-3081, CVE-2006-4031, CVE-2006-4226, CVE-2006-3469), Networking (CVE-2006-6130, CVE-2007-0236), OpenSSH (CVE-2007-0726, CVE-2006-0225, CVE-2006-4924, CVE-2006-5051, CVE-2006-5052), Printing (CVE-2007-0728), QuickDraw Manager (CVE-2007-0588), servermgrd (CVE-2007-0730), SMB File Server (CVE-2007-0731), Software Update (CVE-2007-0463), sudo (CVE-2005-2959), WebLog (CVE-2006-4829).
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "MacOS X 10.3.9 et MacOS X Server 10.3.9 ;",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "MacOS X 10.4 et MacOS X Server 10.4.",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nPlusieurs composants de MacOS X sont sujets \u00e0 des vuln\u00e9rabilit\u00e9s, les\nplus graves permettant \u00e0 un attaquant distant d\u0027ex\u00e9cuter du code\narbitraire. \n\nLes composants impact\u00e9s sont : ColorSync (CVE-2007-0719), CoreGraphics,\nCrash Reporter (CVE-2007-0467), CUPS (CVE-2007-0720), Disk Images\n(CVE-2007-0721, CVE-2007-0722, CVE-2006-6061, CVE-2006-6062,\nCVE-2006-5679, CVE-2007-0229, CVE-2007-0267, CVE-2007-0299), DS Plug-Ins\n(CVE-2007-0723), Flash Player (CVE-2006-5330), GNU Tar (CVE-2006-0300,\nCVE-2006-6097), HFS (CVE-2007-0318), HID Family (CVE-2007-0724), ImageIO\n(CVE-2007-1071, CVE-2007-0733), Kernel (CVE-2006-5836, CVE-2006-6129,\nCVE-2006-6173), MySQL Server (CVE-2006-1516, CVE-2006-1517,\nCVE-2006-2753, CVE-2006-3081, CVE-2006-4031, CVE-2006-4226,\nCVE-2006-3469), Networking (CVE-2006-6130, CVE-2007-0236), OpenSSH\n(CVE-2007-0726, CVE-2006-0225, CVE-2006-4924, CVE-2006-5051,\nCVE-2006-5052), Printing (CVE-2007-0728), QuickDraw Manager\n(CVE-2007-0588), servermgrd (CVE-2007-0730), SMB File Server\n(CVE-2007-0731), Software Update (CVE-2007-0463), sudo (CVE-2005-2959),\nWebLog (CVE-2006-4829).\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2006-3469",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3469"
},
{
"name": "CVE-2006-6061",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6061"
},
{
"name": "CVE-2006-2753",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-2753"
},
{
"name": "CVE-2007-0722",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0722"
},
{
"name": "CVE-2007-0229",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0229"
},
{
"name": "CVE-2006-6173",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6173"
},
{
"name": "CVE-2007-0733",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0733"
},
{
"name": "CVE-2006-5836",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-5836"
},
{
"name": "CVE-2007-0720",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0720"
},
{
"name": "CVE-2006-5052",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-5052"
},
{
"name": "CVE-2006-3081",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3081"
},
{
"name": "CVE-2007-0318",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0318"
},
{
"name": "CVE-2007-0236",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0236"
},
{
"name": "CVE-2006-4829",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-4829"
},
{
"name": "CVE-2006-1517",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-1517"
},
{
"name": "CVE-2006-4924",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-4924"
},
{
"name": "CVE-2005-2959",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-2959"
},
{
"name": "CVE-2007-0728",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0728"
},
{
"name": "CVE-2006-6129",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6129"
},
{
"name": "CVE-2007-0267",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0267"
},
{
"name": "CVE-2007-0731",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0731"
},
{
"name": "CVE-2007-0726",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0726"
},
{
"name": "CVE-2006-4226",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-4226"
},
{
"name": "CVE-2007-0299",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0299"
},
{
"name": "CVE-2007-0724",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0724"
},
{
"name": "CVE-2007-1071",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1071"
},
{
"name": "CVE-2006-4031",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-4031"
},
{
"name": "CVE-2007-0588",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0588"
},
{
"name": "CVE-2006-1516",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-1516"
},
{
"name": "CVE-2006-5679",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-5679"
},
{
"name": "CVE-2007-0721",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0721"
},
{
"name": "CVE-2006-6130",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6130"
},
{
"name": "CVE-2006-5330",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-5330"
},
{
"name": "CVE-2007-0730",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0730"
},
{
"name": "CVE-2006-0300",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-0300"
},
{
"name": "CVE-2007-0719",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0719"
},
{
"name": "CVE-2006-6062",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6062"
},
{
"name": "CVE-2006-0225",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-0225"
},
{
"name": "CVE-2006-5051",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-5051"
},
{
"name": "CVE-2007-0467",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0467"
},
{
"name": "CVE-2007-0463",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0463"
},
{
"name": "CVE-2006-6097",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6097"
},
{
"name": "CVE-2007-0723",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0723"
}
],
"initial_release_date": "2007-03-14T00:00:00",
"last_revision_date": "2007-03-14T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Apple du 12 mars 2007 :",
"url": "http://docs.info.apple.com/article.html?artnum=305214"
}
],
"reference": "CERTA-2007-AVI-124",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2007-03-14T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
},
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s affectent MacOS X. Les plus graves permettent \u00e0\nune personne malintentionn\u00e9e d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance.\n",
"title": "Vuln\u00e9rabilit\u00e9s dans MacOS X",
"vendor_advisories": [
{
"published_at": null,
"title": "Mise \u00e0 jour de s\u00e9curit\u00e9 2007-003 de MacOS X",
"url": null
}
]
}
CERTA-2007-AVI-185
Vulnerability from certfr_avis - Published: 2007-04-20 - Updated: 2007-05-03
Plusieurs vulnérabilités sous Apple MacOS X permettent à un utilisateur malveillant de compromettre un système vulnérable, localement ou à distance.
Description
Plusieurs vulnérabilités sont présentes sous Apple MacOS X :
- une vulnérabilité du client AFP permet à un utilisateur local de créer des fichiers ou d'exécuter des commandes avec les privilèges système ;
- une vulnérabilité dans Airport de type débordement de mémoire permettrait l'exécution d'un code arbitraire avec des privilèges élevés ;
- une vulnérabilité de CarbonCore permet l'exécution d'un code arbitraire avec des privilèges élevés ;
- une vulnérabilité dans fsck permet à un utilisateur d'exécuter du code arbitraire à distance en incitant un utilisateur à charger un fichier image (.dmg) spécialement conçu;
- une vulnérabilité dans fetchmail provoque l'envoi d'informations d'authentification en clair, même lorsque la configuration exige l'utilisation de TLS ;
- un débordement de mémoire dans ftpd permet à un utilisateur authentifié d'exécuter un code arbitraire à distance ;
- une mauvaise gestion de format dans Help Viewer et un débordement de mémoire dans GNU Tar permettent à un utilisateur malintentionné de provoquer un arrêt inopiné de l'application ou d'exécuter du code arbitraire ;
- un contrôle insuffisant dans HID permet à un utilisateur malveillant de capturer les entrées au clavier, y compris les données sensibles ;
- une erreur de gestion de format dans Installer permet à un utilisateur malintentionné de provoquer un arrêt inopiné de l'application ou d'exécuter du code arbitraire à distance ;
- une erreur dans WebFoundation permet à un domaine parent de lire un cookie positionné par l'un de ses sous-domaines ;
- le défaut de gestion de l'environnement par WebDav permet à un utilisateur local malintentionné de créer des fichiers ou d'exécuter des commandes avec les privilèges système ;
- un défaut de validation des paquets SIP par Videoconference permet à un utilisateur malintentionné d'exécuter un code arbitraire à distance ;
- URLMount monte des systèmes de fichiers distants via un serveur SMB en appelant la commande mount_smb ; Les identifiants et les mots de passe sont transmis comme arguments en ligne de commande, ce qui les expose à être divulgués à d'autres utilisateurs ;
- un manque de contrôle dans launchctl permet aux administrateurs locaux de lancer des commandes avec les privilèges système sans s'authentifier ;
- le défaut de gestion de l'environnement par le serveur SMB permettrait à un utilisateur local malintentionné de créer des fichiers ou d'exécuter des commandes avec les privilèges système ;
- lorsque le partage Internet Sharing est actif, un mauvais traitement de paquets RTSP permet à un utilisateur mal intentionné de provoquer un déni de service ou l'exécution de code arbitraire à distance ;
- des erreurs dans Login Window permettent à un utilisateur local de se connecter sans authentification ou d'élever ses privilèges ;
- des erreurs dans Libinfo permettent à un utilisateur malintentionné de provoquer un déni de service ou d'exécuter du code arbitraire à distance ;
- des vulnérabilités dans le démon d'administration de Kerberos permettent à un utilisateur malintentionné de provoquer un arrêt inopiné de l'application ou l'exécution de code arbitraire avec les droits système.
Apple a publié le 01 mai 2007 deux mises à jour de correctifs. La première concerne les pilotes sans-fil Airport pour Mac OS X v10.3.9, et la seconde le serveur FTP FTPServer sous Mac OS X v10.4.9. Le précédent correctif applique un fichier de configuration FTP incorrect, qui permettrait aux utilisateurs d'accéder illégitimement à certains répertoires.
Solution
Appliquer la mise à jour de sécurité 2007-004., ainsi que le correctif de cette mise à jour (v1.1). Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Apple MacOS X server version 10.3.x et 10.4.x.",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple MacOS X version 10.3.x et 10.4.x ;",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s sont pr\u00e9sentes sous Apple MacOS X :\n\n- une vuln\u00e9rabilit\u00e9 du client AFP permet \u00e0 un utilisateur local de\n cr\u00e9er des fichiers ou d\u0027ex\u00e9cuter des commandes avec les privil\u00e8ges\n syst\u00e8me ;\n- une vuln\u00e9rabilit\u00e9 dans Airport de type d\u00e9bordement de m\u00e9moire\n permettrait l\u0027ex\u00e9cution d\u0027un code arbitraire avec des privil\u00e8ges\n \u00e9lev\u00e9s ;\n- une vuln\u00e9rabilit\u00e9 de CarbonCore permet l\u0027ex\u00e9cution d\u0027un code\n arbitraire avec des privil\u00e8ges \u00e9lev\u00e9s ;\n- une vuln\u00e9rabilit\u00e9 dans fsck permet \u00e0 un utilisateur d\u0027ex\u00e9cuter du\n code arbitraire \u00e0 distance en incitant un utilisateur \u00e0 charger un\n fichier image (.dmg) sp\u00e9cialement con\u00e7u;\n- une vuln\u00e9rabilit\u00e9 dans fetchmail provoque l\u0027envoi d\u0027informations\n d\u0027authentification en clair, m\u00eame lorsque la configuration exige\n l\u0027utilisation de TLS ;\n- un d\u00e9bordement de m\u00e9moire dans ftpd permet \u00e0 un utilisateur\n authentifi\u00e9 d\u0027ex\u00e9cuter un code arbitraire \u00e0 distance ;\n- une mauvaise gestion de format dans Help Viewer et un d\u00e9bordement de\n m\u00e9moire dans GNU Tar permettent \u00e0 un utilisateur malintentionn\u00e9 de\n provoquer un arr\u00eat inopin\u00e9 de l\u0027application ou d\u0027ex\u00e9cuter du code\n arbitraire ;\n- un contr\u00f4le insuffisant dans HID permet \u00e0 un utilisateur malveillant\n de capturer les entr\u00e9es au clavier, y compris les donn\u00e9es sensibles\n ;\n- une erreur de gestion de format dans Installer permet \u00e0 un\n utilisateur malintentionn\u00e9 de provoquer un arr\u00eat inopin\u00e9 de\n l\u0027application ou d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance ;\n- une erreur dans WebFoundation permet \u00e0 un domaine parent de lire un\n cookie positionn\u00e9 par l\u0027un de ses sous-domaines ;\n- le d\u00e9faut de gestion de l\u0027environnement par WebDav permet \u00e0 un\n utilisateur local malintentionn\u00e9 de cr\u00e9er des fichiers ou d\u0027ex\u00e9cuter\n des commandes avec les privil\u00e8ges syst\u00e8me ;\n- un d\u00e9faut de validation des paquets SIP par Videoconference permet \u00e0\n un utilisateur malintentionn\u00e9 d\u0027ex\u00e9cuter un code arbitraire \u00e0\n distance ;\n- URLMount monte des syst\u00e8mes de fichiers distants via un serveur SMB\n en appelant la commande mount_smb ; Les identifiants et les mots de\n passe sont transmis comme arguments en ligne de commande, ce qui les\n expose \u00e0 \u00eatre divulgu\u00e9s \u00e0 d\u0027autres utilisateurs ;\n- un manque de contr\u00f4le dans launchctl permet aux administrateurs\n locaux de lancer des commandes avec les privil\u00e8ges syst\u00e8me sans\n s\u0027authentifier ;\n- le d\u00e9faut de gestion de l\u0027environnement par le serveur SMB\n permettrait \u00e0 un utilisateur local malintentionn\u00e9 de cr\u00e9er des\n fichiers ou d\u0027ex\u00e9cuter des commandes avec les privil\u00e8ges syst\u00e8me ;\n- lorsque le partage Internet Sharing est actif, un mauvais traitement\n de paquets RTSP permet \u00e0 un utilisateur mal intentionn\u00e9 de provoquer\n un d\u00e9ni de service ou l\u0027ex\u00e9cution de code arbitraire \u00e0 distance ;\n- des erreurs dans Login Window permettent \u00e0 un utilisateur local de\n se connecter sans authentification ou d\u0027\u00e9lever ses privil\u00e8ges ;\n- des erreurs dans Libinfo permettent \u00e0 un utilisateur malintentionn\u00e9\n de provoquer un d\u00e9ni de service ou d\u0027ex\u00e9cuter du code arbitraire \u00e0\n distance ;\n- des vuln\u00e9rabilit\u00e9s dans le d\u00e9mon d\u0027administration de Kerberos\n permettent \u00e0 un utilisateur malintentionn\u00e9 de provoquer un arr\u00eat\n inopin\u00e9 de l\u0027application ou l\u0027ex\u00e9cution de code arbitraire avec les\n droits syst\u00e8me.\n\nApple a publi\u00e9 le 01 mai 2007 deux mises \u00e0 jour de correctifs. La\npremi\u00e8re concerne les pilotes sans-fil Airport pour Mac OS X v10.3.9, et\nla seconde le serveur FTP FTPServer sous Mac OS X v10.4.9. Le pr\u00e9c\u00e9dent\ncorrectif applique un fichier de configuration FTP incorrect, qui\npermettrait aux utilisateurs d\u0027acc\u00e9der ill\u00e9gitimement \u00e0 certains\nr\u00e9pertoires.\n\n## Solution\n\nAppliquer la mise \u00e0 jour de s\u00e9curit\u00e9 2007-004., ainsi que le correctif\nde cette mise \u00e0 jour (v1.1). Se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de\nl\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2007-0744",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0744"
},
{
"name": "CVE-2007-0646",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0646"
},
{
"name": "CVE-2007-0732",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0732"
},
{
"name": "CVE-2007-0738",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0738"
},
{
"name": "CVE-2006-5867",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-5867"
},
{
"name": "CVE-2007-0741",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0741"
},
{
"name": "CVE-2007-0957",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0957"
},
{
"name": "CVE-2007-0742",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0742"
},
{
"name": "CVE-2007-0729",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0729"
},
{
"name": "CVE-2007-0743",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0743"
},
{
"name": "CVE-2007-0736",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0736"
},
{
"name": "CVE-2007-0465",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0465"
},
{
"name": "CVE-2007-0724",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0724"
},
{
"name": "CVE-2007-0739",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0739"
},
{
"name": "CVE-2007-1216",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-1216"
},
{
"name": "CVE-2007-0734",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0734"
},
{
"name": "CVE-2007-0746",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0746"
},
{
"name": "CVE-2007-0927",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0927"
},
{
"name": "CVE-2006-0300",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-0300"
},
{
"name": "CVE-2007-0745",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0745"
},
{
"name": "CVE-2007-0725",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0725"
},
{
"name": "CVE-2007-0747",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0747"
},
{
"name": "CVE-2007-0022",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0022"
},
{
"name": "CVE-2007-0735",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0735"
},
{
"name": "CVE-2007-0737",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-0737"
},
{
"name": "CVE-2006-6652",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6652"
},
{
"name": "CVE-2006-6143",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-6143"
}
],
"initial_release_date": "2007-04-20T00:00:00",
"last_revision_date": "2007-05-03T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Apple du 19 avril 2007 :",
"url": "http://docs.info.apple.com/article.html?artnum=305391"
},
{
"title": "Mise \u00e0 jour du bulletin pr\u00e9c\u00e9dent, faite le 01 mai 2007 :",
"url": "http://docs.info.apple.com/article.html?artnum=305445"
}
],
"reference": "CERTA-2007-AVI-185",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2007-04-20T00:00:00.000000"
},
{
"description": "ajout de la mise \u00e0 jour du bulletin d\u0027avril 2007, ainsi que la r\u00e9f\u00e9rence au CVE CVE-2007-0745.",
"revision_date": "2007-05-03T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s sous \u003cspan class=\"textit\"\u003eApple MacOS X\u003c/span\u003e\npermettent \u00e0 un utilisateur malveillant de compromettre un syst\u00e8me\nvuln\u00e9rable, localement ou \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple MacOS X",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de mise \u00e0 jour Apple",
"url": null
}
]
}
FKIE_CVE-2006-0300
Vulnerability from fkie_nvd - Published: 2006-02-24 00:02 - Updated: 2026-04-16 00:27
Severity
Summary
Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.
References
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:gnu:tar:1.14:*:*:*:*:*:*:*",
"matchCriteriaId": "B87C1F89-63A8-4955-9C42-3B49EC1C1C78",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gnu:tar:1.14.1:*:*:*:*:*:*:*",
"matchCriteriaId": "EA4A8A88-D915-455C-A226-A8AD8A9E887E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gnu:tar:1.15:*:*:*:*:*:*:*",
"matchCriteriaId": "7FE339D0-D585-440D-8BD4-5183833258F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gnu:tar:1.15.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B8B4A20D-AAD0-4857-AC0F-D221EBB08BFD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:gnu:tar:1.15.90:*:*:*:*:*:*:*",
"matchCriteriaId": "C9B46F22-B0FB-4F99-B44E-D34E0DD5D194",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers."
}
],
"id": "CVE-2006-0300",
"lastModified": "2026-04-16T00:27:16.627",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 4.9,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": true,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
]
},
"published": "2006-02-24T00:02:00.000",
"references": [
{
"source": "secalert@redhat.com",
"url": "http://docs.info.apple.com/article.html?artnum=305214"
},
{
"source": "secalert@redhat.com",
"url": "http://docs.info.apple.com/article.html?artnum=305391"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.gnu.org/archive/html/bug-tar/2006-02/msg00051.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/18973"
},
{
"source": "secalert@redhat.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/18976"
},
{
"source": "secalert@redhat.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/18999"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/19016"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/19093"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/19130"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/19152"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/19236"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/20042"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/24479"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/24966"
},
{
"source": "secalert@redhat.com",
"url": "http://securityreason.com/securityalert/480"
},
{
"source": "secalert@redhat.com",
"url": "http://securityreason.com/securityalert/543"
},
{
"source": "secalert@redhat.com",
"url": "http://securitytracker.com/id?1015705"
},
{
"source": "secalert@redhat.com",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-241646-1"
},
{
"source": "secalert@redhat.com",
"url": "http://www.debian.org/security/2006/dsa-987"
},
{
"source": "secalert@redhat.com",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200603-06.xml"
},
{
"source": "secalert@redhat.com",
"url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
},
{
"source": "secalert@redhat.com",
"url": "http://www.openpkg.org/security/OpenPKG-SA-2006.006-tar.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Patch"
],
"url": "http://www.osvdb.org/23371"
},
{
"source": "secalert@redhat.com",
"url": "http://www.redhat.com/support/errata/RHSA-2006-0232.html"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securityfocus.com/archive/1/430299/100/0/threaded"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securityfocus.com/bid/16764"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://www.trustix.org/errata/2006/0010"
},
{
"source": "secalert@redhat.com",
"tags": [
"US Government Resource"
],
"url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"US Government Resource"
],
"url": "http://www.us-cert.gov/cas/techalerts/TA07-109A.html"
},
{
"source": "secalert@redhat.com",
"url": "http://www.vupen.com/english/advisories/2006/0684"
},
{
"source": "secalert@redhat.com",
"url": "http://www.vupen.com/english/advisories/2007/0930"
},
{
"source": "secalert@redhat.com",
"url": "http://www.vupen.com/english/advisories/2007/1470"
},
{
"source": "secalert@redhat.com",
"url": "http://www.vupen.com/english/advisories/2008/2518"
},
{
"source": "secalert@redhat.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:046"
},
{
"source": "secalert@redhat.com",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24855"
},
{
"source": "secalert@redhat.com",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5252"
},
{
"source": "secalert@redhat.com",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5978"
},
{
"source": "secalert@redhat.com",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5993"
},
{
"source": "secalert@redhat.com",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6094"
},
{
"source": "secalert@redhat.com",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9295"
},
{
"source": "secalert@redhat.com",
"url": "https://usn.ubuntu.com/257-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://docs.info.apple.com/article.html?artnum=305214"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://docs.info.apple.com/article.html?artnum=305391"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.gnu.org/archive/html/bug-tar/2006-02/msg00051.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/18973"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/18976"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/18999"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/19016"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/19093"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/19130"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/19152"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/19236"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/20042"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/24479"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/24966"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://securityreason.com/securityalert/480"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://securityreason.com/securityalert/543"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://securitytracker.com/id?1015705"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-241646-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.debian.org/security/2006/dsa-987"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200603-06.xml"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.openpkg.org/security/OpenPKG-SA-2006.006-tar.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://www.osvdb.org/23371"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.redhat.com/support/errata/RHSA-2006-0232.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/archive/1/430299/100/0/threaded"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/16764"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://www.trustix.org/errata/2006/0010"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"US Government Resource"
],
"url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"US Government Resource"
],
"url": "http://www.us-cert.gov/cas/techalerts/TA07-109A.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.vupen.com/english/advisories/2006/0684"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.vupen.com/english/advisories/2007/0930"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.vupen.com/english/advisories/2007/1470"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.vupen.com/english/advisories/2008/2518"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:046"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24855"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5252"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5978"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5993"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6094"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9295"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://usn.ubuntu.com/257-1/"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-V2QX-RHMH-M93W
Vulnerability from github – Published: 2022-05-01 06:38 – Updated: 2025-04-03 04:27
VLAI
Details
Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.
{
"affected": [],
"aliases": [
"CVE-2006-0300"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2006-02-24T00:02:00Z",
"severity": "MODERATE"
},
"details": "Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.",
"id": "GHSA-v2qx-rhmh-m93w",
"modified": "2025-04-03T04:27:16Z",
"published": "2022-05-01T06:38:41Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-0300"
},
{
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24855"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5252"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5978"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5993"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6094"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9295"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/257-1"
},
{
"type": "WEB",
"url": "http://docs.info.apple.com/article.html?artnum=305214"
},
{
"type": "WEB",
"url": "http://docs.info.apple.com/article.html?artnum=305391"
},
{
"type": "WEB",
"url": "http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html"
},
{
"type": "WEB",
"url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
},
{
"type": "WEB",
"url": "http://lists.gnu.org/archive/html/bug-tar/2006-02/msg00051.html"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/18973"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/18976"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/18999"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/19016"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/19093"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/19130"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/19152"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/19236"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/20042"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/24479"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/24966"
},
{
"type": "WEB",
"url": "http://securityreason.com/securityalert/480"
},
{
"type": "WEB",
"url": "http://securityreason.com/securityalert/543"
},
{
"type": "WEB",
"url": "http://securitytracker.com/id?1015705"
},
{
"type": "WEB",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-241646-1"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2006/dsa-987"
},
{
"type": "WEB",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200603-06.xml"
},
{
"type": "WEB",
"url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
},
{
"type": "WEB",
"url": "http://www.openpkg.org/security/OpenPKG-SA-2006.006-tar.html"
},
{
"type": "WEB",
"url": "http://www.osvdb.org/23371"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2006-0232.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/archive/1/430299/100/0/threaded"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/16764"
},
{
"type": "WEB",
"url": "http://www.trustix.org/errata/2006/0010"
},
{
"type": "WEB",
"url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
},
{
"type": "WEB",
"url": "http://www.us-cert.gov/cas/techalerts/TA07-109A.html"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2006/0684"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2007/0930"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2007/1470"
},
{
"type": "WEB",
"url": "http://www.vupen.com/english/advisories/2008/2518"
},
{
"type": "WEB",
"url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:046"
}
],
"schema_version": "1.4.0",
"severity": []
}
GSD-2006-0300
Vulnerability from gsd - Updated: 2023-12-13 01:19Details
Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2006-0300",
"description": "Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.",
"id": "GSD-2006-0300",
"references": [
"https://www.suse.com/security/cve/CVE-2006-0300.html",
"https://www.debian.org/security/2006/dsa-987",
"https://access.redhat.com/errata/RHSA-2006:0232"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2006-0300"
],
"details": "Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.",
"id": "GSD-2006-0300",
"modified": "2023-12-13T01:19:50.721565Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2006-0300",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://docs.info.apple.com/article.html?artnum=305214",
"refsource": "MISC",
"url": "http://docs.info.apple.com/article.html?artnum=305214"
},
{
"name": "http://docs.info.apple.com/article.html?artnum=305391",
"refsource": "MISC",
"url": "http://docs.info.apple.com/article.html?artnum=305391"
},
{
"name": "http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html",
"refsource": "MISC",
"url": "http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html"
},
{
"name": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html",
"refsource": "MISC",
"url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
},
{
"name": "http://lists.gnu.org/archive/html/bug-tar/2006-02/msg00051.html",
"refsource": "MISC",
"url": "http://lists.gnu.org/archive/html/bug-tar/2006-02/msg00051.html"
},
{
"name": "http://secunia.com/advisories/18973",
"refsource": "MISC",
"url": "http://secunia.com/advisories/18973"
},
{
"name": "http://secunia.com/advisories/18976",
"refsource": "MISC",
"url": "http://secunia.com/advisories/18976"
},
{
"name": "http://secunia.com/advisories/18999",
"refsource": "MISC",
"url": "http://secunia.com/advisories/18999"
},
{
"name": "http://secunia.com/advisories/19016",
"refsource": "MISC",
"url": "http://secunia.com/advisories/19016"
},
{
"name": "http://secunia.com/advisories/19093",
"refsource": "MISC",
"url": "http://secunia.com/advisories/19093"
},
{
"name": "http://secunia.com/advisories/19130",
"refsource": "MISC",
"url": "http://secunia.com/advisories/19130"
},
{
"name": "http://secunia.com/advisories/19152",
"refsource": "MISC",
"url": "http://secunia.com/advisories/19152"
},
{
"name": "http://secunia.com/advisories/19236",
"refsource": "MISC",
"url": "http://secunia.com/advisories/19236"
},
{
"name": "http://secunia.com/advisories/20042",
"refsource": "MISC",
"url": "http://secunia.com/advisories/20042"
},
{
"name": "http://secunia.com/advisories/24479",
"refsource": "MISC",
"url": "http://secunia.com/advisories/24479"
},
{
"name": "http://secunia.com/advisories/24966",
"refsource": "MISC",
"url": "http://secunia.com/advisories/24966"
},
{
"name": "http://securityreason.com/securityalert/480",
"refsource": "MISC",
"url": "http://securityreason.com/securityalert/480"
},
{
"name": "http://securityreason.com/securityalert/543",
"refsource": "MISC",
"url": "http://securityreason.com/securityalert/543"
},
{
"name": "http://securitytracker.com/id?1015705",
"refsource": "MISC",
"url": "http://securitytracker.com/id?1015705"
},
{
"name": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-241646-1",
"refsource": "MISC",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-241646-1"
},
{
"name": "http://www.debian.org/security/2006/dsa-987",
"refsource": "MISC",
"url": "http://www.debian.org/security/2006/dsa-987"
},
{
"name": "http://www.gentoo.org/security/en/glsa/glsa-200603-06.xml",
"refsource": "MISC",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200603-06.xml"
},
{
"name": "http://www.novell.com/linux/security/advisories/2006_05_sr.html",
"refsource": "MISC",
"url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
},
{
"name": "http://www.openpkg.org/security/OpenPKG-SA-2006.006-tar.html",
"refsource": "MISC",
"url": "http://www.openpkg.org/security/OpenPKG-SA-2006.006-tar.html"
},
{
"name": "http://www.osvdb.org/23371",
"refsource": "MISC",
"url": "http://www.osvdb.org/23371"
},
{
"name": "http://www.redhat.com/support/errata/RHSA-2006-0232.html",
"refsource": "MISC",
"url": "http://www.redhat.com/support/errata/RHSA-2006-0232.html"
},
{
"name": "http://www.securityfocus.com/archive/1/430299/100/0/threaded",
"refsource": "MISC",
"url": "http://www.securityfocus.com/archive/1/430299/100/0/threaded"
},
{
"name": "http://www.securityfocus.com/bid/16764",
"refsource": "MISC",
"url": "http://www.securityfocus.com/bid/16764"
},
{
"name": "http://www.trustix.org/errata/2006/0010",
"refsource": "MISC",
"url": "http://www.trustix.org/errata/2006/0010"
},
{
"name": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html",
"refsource": "MISC",
"url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
},
{
"name": "http://www.us-cert.gov/cas/techalerts/TA07-109A.html",
"refsource": "MISC",
"url": "http://www.us-cert.gov/cas/techalerts/TA07-109A.html"
},
{
"name": "http://www.vupen.com/english/advisories/2006/0684",
"refsource": "MISC",
"url": "http://www.vupen.com/english/advisories/2006/0684"
},
{
"name": "http://www.vupen.com/english/advisories/2007/0930",
"refsource": "MISC",
"url": "http://www.vupen.com/english/advisories/2007/0930"
},
{
"name": "http://www.vupen.com/english/advisories/2007/1470",
"refsource": "MISC",
"url": "http://www.vupen.com/english/advisories/2007/1470"
},
{
"name": "http://www.vupen.com/english/advisories/2008/2518",
"refsource": "MISC",
"url": "http://www.vupen.com/english/advisories/2008/2518"
},
{
"name": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:046",
"refsource": "MISC",
"url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:046"
},
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24855",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24855"
},
{
"name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5252",
"refsource": "MISC",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5252"
},
{
"name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5978",
"refsource": "MISC",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5978"
},
{
"name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5993",
"refsource": "MISC",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5993"
},
{
"name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6094",
"refsource": "MISC",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6094"
},
{
"name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9295",
"refsource": "MISC",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9295"
},
{
"name": "https://usn.ubuntu.com/257-1/",
"refsource": "MISC",
"url": "https://usn.ubuntu.com/257-1/"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:gnu:tar:1.14.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:tar:1.15:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:tar:1.15.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:tar:1.15.90:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:gnu:tar:1.14:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2006-0300"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "[Bug-tar] 20060220 tar 1.15.90 released",
"refsource": "MLIST",
"tags": [],
"url": "http://lists.gnu.org/archive/html/bug-tar/2006-02/msg00051.html"
},
{
"name": "MDKSA-2006:046",
"refsource": "MANDRIVA",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:046"
},
{
"name": "16764",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/16764"
},
{
"name": "23371",
"refsource": "OSVDB",
"tags": [
"Patch"
],
"url": "http://www.osvdb.org/23371"
},
{
"name": "18976",
"refsource": "SECUNIA",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/18976"
},
{
"name": "18973",
"refsource": "SECUNIA",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/18973"
},
{
"name": "2006-0010",
"refsource": "TRUSTIX",
"tags": [
"Vendor Advisory"
],
"url": "http://www.trustix.org/errata/2006/0010"
},
{
"name": "18999",
"refsource": "SECUNIA",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/18999"
},
{
"name": "DSA-987",
"refsource": "DEBIAN",
"tags": [],
"url": "http://www.debian.org/security/2006/dsa-987"
},
{
"name": "OpenPKG-SA-2006.006",
"refsource": "OPENPKG",
"tags": [],
"url": "http://www.openpkg.org/security/OpenPKG-SA-2006.006-tar.html"
},
{
"name": "RHSA-2006:0232",
"refsource": "REDHAT",
"tags": [],
"url": "http://www.redhat.com/support/errata/RHSA-2006-0232.html"
},
{
"name": "SUSE-SR:2006:005",
"refsource": "SUSE",
"tags": [],
"url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
},
{
"name": "1015705",
"refsource": "SECTRACK",
"tags": [],
"url": "http://securitytracker.com/id?1015705"
},
{
"name": "19093",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/19093"
},
{
"name": "19130",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/19130"
},
{
"name": "19152",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/19152"
},
{
"name": "GLSA-200603-06",
"refsource": "GENTOO",
"tags": [],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200603-06.xml"
},
{
"name": "19236",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/19236"
},
{
"name": "19016",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/19016"
},
{
"name": "http://docs.info.apple.com/article.html?artnum=305214",
"refsource": "CONFIRM",
"tags": [],
"url": "http://docs.info.apple.com/article.html?artnum=305214"
},
{
"name": "20042",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/20042"
},
{
"name": "24479",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/24479"
},
{
"name": "http://docs.info.apple.com/article.html?artnum=305391",
"refsource": "CONFIRM",
"tags": [],
"url": "http://docs.info.apple.com/article.html?artnum=305391"
},
{
"name": "APPLE-SA-2007-04-19",
"refsource": "APPLE",
"tags": [],
"url": "http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html"
},
{
"name": "24966",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/24966"
},
{
"name": "APPLE-SA-2007-03-13",
"refsource": "APPLE",
"tags": [],
"url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html"
},
{
"name": "TA07-072A",
"refsource": "CERT",
"tags": [
"US Government Resource"
],
"url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html"
},
{
"name": "TA07-109A",
"refsource": "CERT",
"tags": [
"US Government Resource"
],
"url": "http://www.us-cert.gov/cas/techalerts/TA07-109A.html"
},
{
"name": "480",
"refsource": "SREASON",
"tags": [],
"url": "http://securityreason.com/securityalert/480"
},
{
"name": "543",
"refsource": "SREASON",
"tags": [],
"url": "http://securityreason.com/securityalert/543"
},
{
"name": "241646",
"refsource": "SUNALERT",
"tags": [],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-241646-1"
},
{
"name": "ADV-2006-0684",
"refsource": "VUPEN",
"tags": [],
"url": "http://www.vupen.com/english/advisories/2006/0684"
},
{
"name": "ADV-2007-0930",
"refsource": "VUPEN",
"tags": [],
"url": "http://www.vupen.com/english/advisories/2007/0930"
},
{
"name": "ADV-2007-1470",
"refsource": "VUPEN",
"tags": [],
"url": "http://www.vupen.com/english/advisories/2007/1470"
},
{
"name": "ADV-2008-2518",
"refsource": "VUPEN",
"tags": [],
"url": "http://www.vupen.com/english/advisories/2008/2518"
},
{
"name": "gnu-tar-pax-headers-bo(24855)",
"refsource": "XF",
"tags": [],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24855"
},
{
"name": "oval:org.mitre.oval:def:9295",
"refsource": "OVAL",
"tags": [],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9295"
},
{
"name": "oval:org.mitre.oval:def:6094",
"refsource": "OVAL",
"tags": [],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6094"
},
{
"name": "oval:org.mitre.oval:def:5993",
"refsource": "OVAL",
"tags": [],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5993"
},
{
"name": "oval:org.mitre.oval:def:5978",
"refsource": "OVAL",
"tags": [],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5978"
},
{
"name": "oval:org.mitre.oval:def:5252",
"refsource": "OVAL",
"tags": [],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5252"
},
{
"name": "USN-257-1",
"refsource": "UBUNTU",
"tags": [],
"url": "https://usn.ubuntu.com/257-1/"
},
{
"name": "FLSA:183571-2",
"refsource": "FEDORA",
"tags": [],
"url": "http://www.securityfocus.com/archive/1/430299/100/0/threaded"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 4.9,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": true,
"severity": "MEDIUM",
"userInteractionRequired": true
}
},
"lastModifiedDate": "2018-10-19T15:44Z",
"publishedDate": "2006-02-24T00:02Z"
}
}
}
OPENSUSE-SU-2024:11422-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
tar-1.34-2.2 on GA media
Severity
Moderate
Notes
Title of the patch: tar-1.34-2.2 on GA media
Description of the patch: These are all security issues fixed in the tar-1.34-2.2 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2024-11422
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
References
29 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "tar-1.34-2.2 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the tar-1.34-2.2 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-11422",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11422-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2001-1267 page",
"url": "https://www.suse.com/security/cve/CVE-2001-1267/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2002-0399 page",
"url": "https://www.suse.com/security/cve/CVE-2002-0399/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2005-1918 page",
"url": "https://www.suse.com/security/cve/CVE-2005-1918/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2006-0300 page",
"url": "https://www.suse.com/security/cve/CVE-2006-0300/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2006-6097 page",
"url": "https://www.suse.com/security/cve/CVE-2006-6097/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-20482 page",
"url": "https://www.suse.com/security/cve/CVE-2018-20482/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-9923 page",
"url": "https://www.suse.com/security/cve/CVE-2019-9923/"
}
],
"title": "tar-1.34-2.2 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:11422-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "tar-1.34-2.2.aarch64",
"product": {
"name": "tar-1.34-2.2.aarch64",
"product_id": "tar-1.34-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "tar-backup-scripts-1.34-2.2.aarch64",
"product": {
"name": "tar-backup-scripts-1.34-2.2.aarch64",
"product_id": "tar-backup-scripts-1.34-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "tar-doc-1.34-2.2.aarch64",
"product": {
"name": "tar-doc-1.34-2.2.aarch64",
"product_id": "tar-doc-1.34-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "tar-lang-1.34-2.2.aarch64",
"product": {
"name": "tar-lang-1.34-2.2.aarch64",
"product_id": "tar-lang-1.34-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "tar-rmt-1.34-2.2.aarch64",
"product": {
"name": "tar-rmt-1.34-2.2.aarch64",
"product_id": "tar-rmt-1.34-2.2.aarch64"
}
},
{
"category": "product_version",
"name": "tar-tests-1.34-2.2.aarch64",
"product": {
"name": "tar-tests-1.34-2.2.aarch64",
"product_id": "tar-tests-1.34-2.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "tar-1.34-2.2.ppc64le",
"product": {
"name": "tar-1.34-2.2.ppc64le",
"product_id": "tar-1.34-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "tar-backup-scripts-1.34-2.2.ppc64le",
"product": {
"name": "tar-backup-scripts-1.34-2.2.ppc64le",
"product_id": "tar-backup-scripts-1.34-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "tar-doc-1.34-2.2.ppc64le",
"product": {
"name": "tar-doc-1.34-2.2.ppc64le",
"product_id": "tar-doc-1.34-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "tar-lang-1.34-2.2.ppc64le",
"product": {
"name": "tar-lang-1.34-2.2.ppc64le",
"product_id": "tar-lang-1.34-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "tar-rmt-1.34-2.2.ppc64le",
"product": {
"name": "tar-rmt-1.34-2.2.ppc64le",
"product_id": "tar-rmt-1.34-2.2.ppc64le"
}
},
{
"category": "product_version",
"name": "tar-tests-1.34-2.2.ppc64le",
"product": {
"name": "tar-tests-1.34-2.2.ppc64le",
"product_id": "tar-tests-1.34-2.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "tar-1.34-2.2.s390x",
"product": {
"name": "tar-1.34-2.2.s390x",
"product_id": "tar-1.34-2.2.s390x"
}
},
{
"category": "product_version",
"name": "tar-backup-scripts-1.34-2.2.s390x",
"product": {
"name": "tar-backup-scripts-1.34-2.2.s390x",
"product_id": "tar-backup-scripts-1.34-2.2.s390x"
}
},
{
"category": "product_version",
"name": "tar-doc-1.34-2.2.s390x",
"product": {
"name": "tar-doc-1.34-2.2.s390x",
"product_id": "tar-doc-1.34-2.2.s390x"
}
},
{
"category": "product_version",
"name": "tar-lang-1.34-2.2.s390x",
"product": {
"name": "tar-lang-1.34-2.2.s390x",
"product_id": "tar-lang-1.34-2.2.s390x"
}
},
{
"category": "product_version",
"name": "tar-rmt-1.34-2.2.s390x",
"product": {
"name": "tar-rmt-1.34-2.2.s390x",
"product_id": "tar-rmt-1.34-2.2.s390x"
}
},
{
"category": "product_version",
"name": "tar-tests-1.34-2.2.s390x",
"product": {
"name": "tar-tests-1.34-2.2.s390x",
"product_id": "tar-tests-1.34-2.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "tar-1.34-2.2.x86_64",
"product": {
"name": "tar-1.34-2.2.x86_64",
"product_id": "tar-1.34-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "tar-backup-scripts-1.34-2.2.x86_64",
"product": {
"name": "tar-backup-scripts-1.34-2.2.x86_64",
"product_id": "tar-backup-scripts-1.34-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "tar-doc-1.34-2.2.x86_64",
"product": {
"name": "tar-doc-1.34-2.2.x86_64",
"product_id": "tar-doc-1.34-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "tar-lang-1.34-2.2.x86_64",
"product": {
"name": "tar-lang-1.34-2.2.x86_64",
"product_id": "tar-lang-1.34-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "tar-rmt-1.34-2.2.x86_64",
"product": {
"name": "tar-rmt-1.34-2.2.x86_64",
"product_id": "tar-rmt-1.34-2.2.x86_64"
}
},
{
"category": "product_version",
"name": "tar-tests-1.34-2.2.x86_64",
"product": {
"name": "tar-tests-1.34-2.2.x86_64",
"product_id": "tar-tests-1.34-2.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-1.34-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-1.34-2.2.aarch64"
},
"product_reference": "tar-1.34-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-1.34-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-1.34-2.2.ppc64le"
},
"product_reference": "tar-1.34-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-1.34-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-1.34-2.2.s390x"
},
"product_reference": "tar-1.34-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-1.34-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-1.34-2.2.x86_64"
},
"product_reference": "tar-1.34-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-backup-scripts-1.34-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64"
},
"product_reference": "tar-backup-scripts-1.34-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-backup-scripts-1.34-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le"
},
"product_reference": "tar-backup-scripts-1.34-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-backup-scripts-1.34-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x"
},
"product_reference": "tar-backup-scripts-1.34-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-backup-scripts-1.34-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64"
},
"product_reference": "tar-backup-scripts-1.34-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-doc-1.34-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64"
},
"product_reference": "tar-doc-1.34-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-doc-1.34-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le"
},
"product_reference": "tar-doc-1.34-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-doc-1.34-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x"
},
"product_reference": "tar-doc-1.34-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-doc-1.34-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64"
},
"product_reference": "tar-doc-1.34-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-lang-1.34-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64"
},
"product_reference": "tar-lang-1.34-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-lang-1.34-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le"
},
"product_reference": "tar-lang-1.34-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-lang-1.34-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x"
},
"product_reference": "tar-lang-1.34-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-lang-1.34-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64"
},
"product_reference": "tar-lang-1.34-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-rmt-1.34-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64"
},
"product_reference": "tar-rmt-1.34-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-rmt-1.34-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le"
},
"product_reference": "tar-rmt-1.34-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-rmt-1.34-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x"
},
"product_reference": "tar-rmt-1.34-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-rmt-1.34-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64"
},
"product_reference": "tar-rmt-1.34-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-tests-1.34-2.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64"
},
"product_reference": "tar-tests-1.34-2.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-tests-1.34-2.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le"
},
"product_reference": "tar-tests-1.34-2.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-tests-1.34-2.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x"
},
"product_reference": "tar-tests-1.34-2.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-tests-1.34-2.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
},
"product_reference": "tar-tests-1.34-2.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2001-1267",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2001-1267"
}
],
"notes": [
{
"category": "general",
"text": "Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2001-1267",
"url": "https://www.suse.com/security/cve/CVE-2001-1267"
},
{
"category": "external",
"summary": "SUSE Bug 1203750 for CVE-2001-1267",
"url": "https://bugzilla.suse.com/1203750"
},
{
"category": "external",
"summary": "SUSE Bug 299738 for CVE-2001-1267",
"url": "https://bugzilla.suse.com/299738"
},
{
"category": "external",
"summary": "SUSE Bug 299745 for CVE-2001-1267",
"url": "https://bugzilla.suse.com/299745"
},
{
"category": "external",
"summary": "SUSE Bug 299747 for CVE-2001-1267",
"url": "https://bugzilla.suse.com/299747"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2001-1267"
},
{
"cve": "CVE-2002-0399",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2002-0399"
}
],
"notes": [
{
"category": "general",
"text": "Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary files during archive extraction via a (1) \"/..\" or (2) \"./..\" string, which removes the leading slash but leaves the \"..\", a variant of CVE-2001-1267.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2002-0399",
"url": "https://www.suse.com/security/cve/CVE-2002-0399"
},
{
"category": "external",
"summary": "SUSE Bug 145081 for CVE-2002-0399",
"url": "https://bugzilla.suse.com/145081"
},
{
"category": "external",
"summary": "SUSE Bug 299738 for CVE-2002-0399",
"url": "https://bugzilla.suse.com/299738"
},
{
"category": "external",
"summary": "SUSE Bug 299745 for CVE-2002-0399",
"url": "https://bugzilla.suse.com/299745"
},
{
"category": "external",
"summary": "SUSE Bug 299747 for CVE-2002-0399",
"url": "https://bugzilla.suse.com/299747"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2002-0399"
},
{
"cve": "CVE-2005-1918",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2005-1918"
}
],
"notes": [
{
"category": "general",
"text": "The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an \"incorrect optimization\" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving \"/../\" sequences with a leading \"/\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2005-1918",
"url": "https://www.suse.com/security/cve/CVE-2005-1918"
},
{
"category": "external",
"summary": "SUSE Bug 145081 for CVE-2005-1918",
"url": "https://bugzilla.suse.com/145081"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2005-1918"
},
{
"cve": "CVE-2006-0300",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2006-0300"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2006-0300",
"url": "https://www.suse.com/security/cve/CVE-2006-0300"
},
{
"category": "external",
"summary": "SUSE Bug 151516 for CVE-2006-0300",
"url": "https://bugzilla.suse.com/151516"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2006-0300"
},
{
"cve": "CVE-2006-6097",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2006-6097"
}
],
"notes": [
{
"category": "general",
"text": "GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2006-6097",
"url": "https://www.suse.com/security/cve/CVE-2006-6097"
},
{
"category": "external",
"summary": "SUSE Bug 223185 for CVE-2006-6097",
"url": "https://bugzilla.suse.com/223185"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2006-6097"
},
{
"cve": "CVE-2018-20482",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-20482"
}
],
"notes": [
{
"category": "general",
"text": "GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed to be archived by a different user\u0027s process (e.g., a system backup running as root).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-20482",
"url": "https://www.suse.com/security/cve/CVE-2018-20482"
},
{
"category": "external",
"summary": "SUSE Bug 1120610 for CVE-2018-20482",
"url": "https://bugzilla.suse.com/1120610"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2018-20482"
},
{
"cve": "CVE-2019-9923",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-9923"
}
],
"notes": [
{
"category": "general",
"text": "pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-9923",
"url": "https://www.suse.com/security/cve/CVE-2019-9923"
},
{
"category": "external",
"summary": "SUSE Bug 1130496 for CVE-2019-9923",
"url": "https://bugzilla.suse.com/1130496"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:tar-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-backup-scripts-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-doc-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-lang-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-rmt-1.34-2.2.x86_64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.aarch64",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.ppc64le",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.s390x",
"openSUSE Tumbleweed:tar-tests-1.34-2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2019-9923"
}
]
}
RHSA-2006:0232
Vulnerability from csaf_redhat - Published: 2006-03-01 15:03 - Updated: 2025-11-21 17:30Summary
Red Hat Security Advisory: tar security update
Severity
Moderate
Notes
Topic: An updated tar package that fixes a buffer overflow bug is now available
for Red Hat Enterprise Linux 4.
This update has been rated as having Moderate security impact by the Red
Hat Security Response Team.
Details: The GNU tar program saves many files together in one archive and can
restore individual files (or all of the files) from that archive.
Jim Meyering discovered a buffer overflow bug in the way GNU tar extracts
malformed archives. By tricking a user into extracting a malicious tar
archive, it is possible to execute arbitrary code as the user running tar.
The Common Vulnerabilities and Exposures project (cve.mitre.org) assigned
the name CVE-2006-0300 to this issue.
Users of tar should upgrade to this updated package, which contains a
backported patch to correct this issue.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.
Affected products
Fixed
52 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 4AS:tar-0:1.14-9.RHEL4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:tar-0:1.14-9.RHEL4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:tar-0:1.14-9.RHEL4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:tar-0:1.14-9.RHEL4.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:tar-0:1.14-9.RHEL4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:tar-0:1.14-9.RHEL4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:tar-0:1.14-9.RHEL4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:tar-debuginfo-0:1.14-9.RHEL4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:tar-debuginfo-0:1.14-9.RHEL4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:tar-debuginfo-0:1.14-9.RHEL4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:tar-debuginfo-0:1.14-9.RHEL4.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:tar-debuginfo-0:1.14-9.RHEL4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4AS:tar-debuginfo-0:1.14-9.RHEL4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:tar-0:1.14-9.RHEL4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:tar-0:1.14-9.RHEL4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:tar-0:1.14-9.RHEL4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:tar-0:1.14-9.RHEL4.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:tar-0:1.14-9.RHEL4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:tar-0:1.14-9.RHEL4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:tar-0:1.14-9.RHEL4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:tar-debuginfo-0:1.14-9.RHEL4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:tar-debuginfo-0:1.14-9.RHEL4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:tar-debuginfo-0:1.14-9.RHEL4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:tar-debuginfo-0:1.14-9.RHEL4.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:tar-debuginfo-0:1.14-9.RHEL4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4Desktop:tar-debuginfo-0:1.14-9.RHEL4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:tar-0:1.14-9.RHEL4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:tar-0:1.14-9.RHEL4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:tar-0:1.14-9.RHEL4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:tar-0:1.14-9.RHEL4.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:tar-0:1.14-9.RHEL4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:tar-0:1.14-9.RHEL4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:tar-0:1.14-9.RHEL4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:tar-debuginfo-0:1.14-9.RHEL4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:tar-debuginfo-0:1.14-9.RHEL4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:tar-debuginfo-0:1.14-9.RHEL4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:tar-debuginfo-0:1.14-9.RHEL4.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:tar-debuginfo-0:1.14-9.RHEL4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4ES:tar-debuginfo-0:1.14-9.RHEL4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:tar-0:1.14-9.RHEL4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:tar-0:1.14-9.RHEL4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:tar-0:1.14-9.RHEL4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:tar-0:1.14-9.RHEL4.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:tar-0:1.14-9.RHEL4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:tar-0:1.14-9.RHEL4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:tar-0:1.14-9.RHEL4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:tar-debuginfo-0:1.14-9.RHEL4.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:tar-debuginfo-0:1.14-9.RHEL4.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:tar-debuginfo-0:1.14-9.RHEL4.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:tar-debuginfo-0:1.14-9.RHEL4.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:tar-debuginfo-0:1.14-9.RHEL4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 4WS:tar-debuginfo-0:1.14-9.RHEL4.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated tar package that fixes a buffer overflow bug is now available\nfor Red Hat Enterprise Linux 4.\n\nThis update has been rated as having Moderate security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "The GNU tar program saves many files together in one archive and can\nrestore individual files (or all of the files) from that archive.\n\nJim Meyering discovered a buffer overflow bug in the way GNU tar extracts\nmalformed archives. By tricking a user into extracting a malicious tar\narchive, it is possible to execute arbitrary code as the user running tar.\nThe Common Vulnerabilities and Exposures project (cve.mitre.org) assigned\nthe name CVE-2006-0300 to this issue.\n\nUsers of tar should upgrade to this updated package, which contains a\nbackported patch to correct this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2006:0232",
"url": "https://access.redhat.com/errata/RHSA-2006:0232"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "181772",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=181772"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0232.json"
}
],
"title": "Red Hat Security Advisory: tar security update",
"tracking": {
"current_release_date": "2025-11-21T17:30:04+00:00",
"generator": {
"date": "2025-11-21T17:30:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2006:0232",
"initial_release_date": "2006-03-01T15:03:00+00:00",
"revision_history": [
{
"date": "2006-03-01T15:03:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2006-03-01T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:30:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 4",
"product": {
"name": "Red Hat Enterprise Linux AS version 4",
"product_id": "4AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop version 4",
"product": {
"name": "Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 4",
"product": {
"name": "Red Hat Enterprise Linux ES version 4",
"product_id": "4ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 4",
"product": {
"name": "Red Hat Enterprise Linux WS version 4",
"product_id": "4WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "tar-0:1.14-9.RHEL4.ia64",
"product": {
"name": "tar-0:1.14-9.RHEL4.ia64",
"product_id": "tar-0:1.14-9.RHEL4.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tar@1.14-9.RHEL4?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "tar-debuginfo-0:1.14-9.RHEL4.ia64",
"product": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.ia64",
"product_id": "tar-debuginfo-0:1.14-9.RHEL4.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tar-debuginfo@1.14-9.RHEL4?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "tar-0:1.14-9.RHEL4.src",
"product": {
"name": "tar-0:1.14-9.RHEL4.src",
"product_id": "tar-0:1.14-9.RHEL4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tar@1.14-9.RHEL4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "tar-0:1.14-9.RHEL4.x86_64",
"product": {
"name": "tar-0:1.14-9.RHEL4.x86_64",
"product_id": "tar-0:1.14-9.RHEL4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tar@1.14-9.RHEL4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "tar-debuginfo-0:1.14-9.RHEL4.x86_64",
"product": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.x86_64",
"product_id": "tar-debuginfo-0:1.14-9.RHEL4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tar-debuginfo@1.14-9.RHEL4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "tar-0:1.14-9.RHEL4.i386",
"product": {
"name": "tar-0:1.14-9.RHEL4.i386",
"product_id": "tar-0:1.14-9.RHEL4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tar@1.14-9.RHEL4?arch=i386"
}
}
},
{
"category": "product_version",
"name": "tar-debuginfo-0:1.14-9.RHEL4.i386",
"product": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.i386",
"product_id": "tar-debuginfo-0:1.14-9.RHEL4.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tar-debuginfo@1.14-9.RHEL4?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "tar-0:1.14-9.RHEL4.ppc",
"product": {
"name": "tar-0:1.14-9.RHEL4.ppc",
"product_id": "tar-0:1.14-9.RHEL4.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tar@1.14-9.RHEL4?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "tar-debuginfo-0:1.14-9.RHEL4.ppc",
"product": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.ppc",
"product_id": "tar-debuginfo-0:1.14-9.RHEL4.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tar-debuginfo@1.14-9.RHEL4?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "tar-0:1.14-9.RHEL4.s390",
"product": {
"name": "tar-0:1.14-9.RHEL4.s390",
"product_id": "tar-0:1.14-9.RHEL4.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tar@1.14-9.RHEL4?arch=s390"
}
}
},
{
"category": "product_version",
"name": "tar-debuginfo-0:1.14-9.RHEL4.s390",
"product": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.s390",
"product_id": "tar-debuginfo-0:1.14-9.RHEL4.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tar-debuginfo@1.14-9.RHEL4?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "tar-0:1.14-9.RHEL4.s390x",
"product": {
"name": "tar-0:1.14-9.RHEL4.s390x",
"product_id": "tar-0:1.14-9.RHEL4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tar@1.14-9.RHEL4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "tar-debuginfo-0:1.14-9.RHEL4.s390x",
"product": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.s390x",
"product_id": "tar-debuginfo-0:1.14-9.RHEL4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tar-debuginfo@1.14-9.RHEL4?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tar-0:1.14-9.RHEL4.i386"
},
"product_reference": "tar-0:1.14-9.RHEL4.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tar-0:1.14-9.RHEL4.ia64"
},
"product_reference": "tar-0:1.14-9.RHEL4.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tar-0:1.14-9.RHEL4.ppc"
},
"product_reference": "tar-0:1.14-9.RHEL4.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tar-0:1.14-9.RHEL4.s390"
},
"product_reference": "tar-0:1.14-9.RHEL4.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tar-0:1.14-9.RHEL4.s390x"
},
"product_reference": "tar-0:1.14-9.RHEL4.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.src as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tar-0:1.14-9.RHEL4.src"
},
"product_reference": "tar-0:1.14-9.RHEL4.src",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tar-0:1.14-9.RHEL4.x86_64"
},
"product_reference": "tar-0:1.14-9.RHEL4.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.i386 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tar-debuginfo-0:1.14-9.RHEL4.i386"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.i386",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tar-debuginfo-0:1.14-9.RHEL4.ia64"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.ia64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.ppc as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tar-debuginfo-0:1.14-9.RHEL4.ppc"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.ppc",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.s390 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tar-debuginfo-0:1.14-9.RHEL4.s390"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.s390",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.s390x as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tar-debuginfo-0:1.14-9.RHEL4.s390x"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.s390x",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
"product_id": "4AS:tar-debuginfo-0:1.14-9.RHEL4.x86_64"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.x86_64",
"relates_to_product_reference": "4AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tar-0:1.14-9.RHEL4.i386"
},
"product_reference": "tar-0:1.14-9.RHEL4.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tar-0:1.14-9.RHEL4.ia64"
},
"product_reference": "tar-0:1.14-9.RHEL4.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tar-0:1.14-9.RHEL4.ppc"
},
"product_reference": "tar-0:1.14-9.RHEL4.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tar-0:1.14-9.RHEL4.s390"
},
"product_reference": "tar-0:1.14-9.RHEL4.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tar-0:1.14-9.RHEL4.s390x"
},
"product_reference": "tar-0:1.14-9.RHEL4.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.src as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tar-0:1.14-9.RHEL4.src"
},
"product_reference": "tar-0:1.14-9.RHEL4.src",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tar-0:1.14-9.RHEL4.x86_64"
},
"product_reference": "tar-0:1.14-9.RHEL4.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tar-debuginfo-0:1.14-9.RHEL4.i386"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.i386",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tar-debuginfo-0:1.14-9.RHEL4.ia64"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.ia64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tar-debuginfo-0:1.14-9.RHEL4.ppc"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.ppc",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tar-debuginfo-0:1.14-9.RHEL4.s390"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.s390",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tar-debuginfo-0:1.14-9.RHEL4.s390x"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.s390x",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
"product_id": "4Desktop:tar-debuginfo-0:1.14-9.RHEL4.x86_64"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.x86_64",
"relates_to_product_reference": "4Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tar-0:1.14-9.RHEL4.i386"
},
"product_reference": "tar-0:1.14-9.RHEL4.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tar-0:1.14-9.RHEL4.ia64"
},
"product_reference": "tar-0:1.14-9.RHEL4.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tar-0:1.14-9.RHEL4.ppc"
},
"product_reference": "tar-0:1.14-9.RHEL4.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tar-0:1.14-9.RHEL4.s390"
},
"product_reference": "tar-0:1.14-9.RHEL4.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tar-0:1.14-9.RHEL4.s390x"
},
"product_reference": "tar-0:1.14-9.RHEL4.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.src as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tar-0:1.14-9.RHEL4.src"
},
"product_reference": "tar-0:1.14-9.RHEL4.src",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tar-0:1.14-9.RHEL4.x86_64"
},
"product_reference": "tar-0:1.14-9.RHEL4.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.i386 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tar-debuginfo-0:1.14-9.RHEL4.i386"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.i386",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tar-debuginfo-0:1.14-9.RHEL4.ia64"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.ia64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.ppc as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tar-debuginfo-0:1.14-9.RHEL4.ppc"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.ppc",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.s390 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tar-debuginfo-0:1.14-9.RHEL4.s390"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.s390",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.s390x as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tar-debuginfo-0:1.14-9.RHEL4.s390x"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.s390x",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
"product_id": "4ES:tar-debuginfo-0:1.14-9.RHEL4.x86_64"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.x86_64",
"relates_to_product_reference": "4ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tar-0:1.14-9.RHEL4.i386"
},
"product_reference": "tar-0:1.14-9.RHEL4.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tar-0:1.14-9.RHEL4.ia64"
},
"product_reference": "tar-0:1.14-9.RHEL4.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tar-0:1.14-9.RHEL4.ppc"
},
"product_reference": "tar-0:1.14-9.RHEL4.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tar-0:1.14-9.RHEL4.s390"
},
"product_reference": "tar-0:1.14-9.RHEL4.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tar-0:1.14-9.RHEL4.s390x"
},
"product_reference": "tar-0:1.14-9.RHEL4.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.src as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tar-0:1.14-9.RHEL4.src"
},
"product_reference": "tar-0:1.14-9.RHEL4.src",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-0:1.14-9.RHEL4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tar-0:1.14-9.RHEL4.x86_64"
},
"product_reference": "tar-0:1.14-9.RHEL4.x86_64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.i386 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tar-debuginfo-0:1.14-9.RHEL4.i386"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.i386",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tar-debuginfo-0:1.14-9.RHEL4.ia64"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.ia64",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.ppc as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tar-debuginfo-0:1.14-9.RHEL4.ppc"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.ppc",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.s390 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tar-debuginfo-0:1.14-9.RHEL4.s390"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.s390",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.s390x as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tar-debuginfo-0:1.14-9.RHEL4.s390x"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.s390x",
"relates_to_product_reference": "4WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tar-debuginfo-0:1.14-9.RHEL4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
"product_id": "4WS:tar-debuginfo-0:1.14-9.RHEL4.x86_64"
},
"product_reference": "tar-debuginfo-0:1.14-9.RHEL4.x86_64",
"relates_to_product_reference": "4WS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-0300",
"discovery_date": "2006-02-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617881"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"4AS:tar-0:1.14-9.RHEL4.i386",
"4AS:tar-0:1.14-9.RHEL4.ia64",
"4AS:tar-0:1.14-9.RHEL4.ppc",
"4AS:tar-0:1.14-9.RHEL4.s390",
"4AS:tar-0:1.14-9.RHEL4.s390x",
"4AS:tar-0:1.14-9.RHEL4.src",
"4AS:tar-0:1.14-9.RHEL4.x86_64",
"4AS:tar-debuginfo-0:1.14-9.RHEL4.i386",
"4AS:tar-debuginfo-0:1.14-9.RHEL4.ia64",
"4AS:tar-debuginfo-0:1.14-9.RHEL4.ppc",
"4AS:tar-debuginfo-0:1.14-9.RHEL4.s390",
"4AS:tar-debuginfo-0:1.14-9.RHEL4.s390x",
"4AS:tar-debuginfo-0:1.14-9.RHEL4.x86_64",
"4Desktop:tar-0:1.14-9.RHEL4.i386",
"4Desktop:tar-0:1.14-9.RHEL4.ia64",
"4Desktop:tar-0:1.14-9.RHEL4.ppc",
"4Desktop:tar-0:1.14-9.RHEL4.s390",
"4Desktop:tar-0:1.14-9.RHEL4.s390x",
"4Desktop:tar-0:1.14-9.RHEL4.src",
"4Desktop:tar-0:1.14-9.RHEL4.x86_64",
"4Desktop:tar-debuginfo-0:1.14-9.RHEL4.i386",
"4Desktop:tar-debuginfo-0:1.14-9.RHEL4.ia64",
"4Desktop:tar-debuginfo-0:1.14-9.RHEL4.ppc",
"4Desktop:tar-debuginfo-0:1.14-9.RHEL4.s390",
"4Desktop:tar-debuginfo-0:1.14-9.RHEL4.s390x",
"4Desktop:tar-debuginfo-0:1.14-9.RHEL4.x86_64",
"4ES:tar-0:1.14-9.RHEL4.i386",
"4ES:tar-0:1.14-9.RHEL4.ia64",
"4ES:tar-0:1.14-9.RHEL4.ppc",
"4ES:tar-0:1.14-9.RHEL4.s390",
"4ES:tar-0:1.14-9.RHEL4.s390x",
"4ES:tar-0:1.14-9.RHEL4.src",
"4ES:tar-0:1.14-9.RHEL4.x86_64",
"4ES:tar-debuginfo-0:1.14-9.RHEL4.i386",
"4ES:tar-debuginfo-0:1.14-9.RHEL4.ia64",
"4ES:tar-debuginfo-0:1.14-9.RHEL4.ppc",
"4ES:tar-debuginfo-0:1.14-9.RHEL4.s390",
"4ES:tar-debuginfo-0:1.14-9.RHEL4.s390x",
"4ES:tar-debuginfo-0:1.14-9.RHEL4.x86_64",
"4WS:tar-0:1.14-9.RHEL4.i386",
"4WS:tar-0:1.14-9.RHEL4.ia64",
"4WS:tar-0:1.14-9.RHEL4.ppc",
"4WS:tar-0:1.14-9.RHEL4.s390",
"4WS:tar-0:1.14-9.RHEL4.s390x",
"4WS:tar-0:1.14-9.RHEL4.src",
"4WS:tar-0:1.14-9.RHEL4.x86_64",
"4WS:tar-debuginfo-0:1.14-9.RHEL4.i386",
"4WS:tar-debuginfo-0:1.14-9.RHEL4.ia64",
"4WS:tar-debuginfo-0:1.14-9.RHEL4.ppc",
"4WS:tar-debuginfo-0:1.14-9.RHEL4.s390",
"4WS:tar-debuginfo-0:1.14-9.RHEL4.s390x",
"4WS:tar-debuginfo-0:1.14-9.RHEL4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2006-0300"
},
{
"category": "external",
"summary": "RHBZ#1617881",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617881"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2006-0300",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-0300"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-0300",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2006-0300"
}
],
"release_date": "2005-06-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2006-03-01T15:03:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"4AS:tar-0:1.14-9.RHEL4.i386",
"4AS:tar-0:1.14-9.RHEL4.ia64",
"4AS:tar-0:1.14-9.RHEL4.ppc",
"4AS:tar-0:1.14-9.RHEL4.s390",
"4AS:tar-0:1.14-9.RHEL4.s390x",
"4AS:tar-0:1.14-9.RHEL4.src",
"4AS:tar-0:1.14-9.RHEL4.x86_64",
"4AS:tar-debuginfo-0:1.14-9.RHEL4.i386",
"4AS:tar-debuginfo-0:1.14-9.RHEL4.ia64",
"4AS:tar-debuginfo-0:1.14-9.RHEL4.ppc",
"4AS:tar-debuginfo-0:1.14-9.RHEL4.s390",
"4AS:tar-debuginfo-0:1.14-9.RHEL4.s390x",
"4AS:tar-debuginfo-0:1.14-9.RHEL4.x86_64",
"4Desktop:tar-0:1.14-9.RHEL4.i386",
"4Desktop:tar-0:1.14-9.RHEL4.ia64",
"4Desktop:tar-0:1.14-9.RHEL4.ppc",
"4Desktop:tar-0:1.14-9.RHEL4.s390",
"4Desktop:tar-0:1.14-9.RHEL4.s390x",
"4Desktop:tar-0:1.14-9.RHEL4.src",
"4Desktop:tar-0:1.14-9.RHEL4.x86_64",
"4Desktop:tar-debuginfo-0:1.14-9.RHEL4.i386",
"4Desktop:tar-debuginfo-0:1.14-9.RHEL4.ia64",
"4Desktop:tar-debuginfo-0:1.14-9.RHEL4.ppc",
"4Desktop:tar-debuginfo-0:1.14-9.RHEL4.s390",
"4Desktop:tar-debuginfo-0:1.14-9.RHEL4.s390x",
"4Desktop:tar-debuginfo-0:1.14-9.RHEL4.x86_64",
"4ES:tar-0:1.14-9.RHEL4.i386",
"4ES:tar-0:1.14-9.RHEL4.ia64",
"4ES:tar-0:1.14-9.RHEL4.ppc",
"4ES:tar-0:1.14-9.RHEL4.s390",
"4ES:tar-0:1.14-9.RHEL4.s390x",
"4ES:tar-0:1.14-9.RHEL4.src",
"4ES:tar-0:1.14-9.RHEL4.x86_64",
"4ES:tar-debuginfo-0:1.14-9.RHEL4.i386",
"4ES:tar-debuginfo-0:1.14-9.RHEL4.ia64",
"4ES:tar-debuginfo-0:1.14-9.RHEL4.ppc",
"4ES:tar-debuginfo-0:1.14-9.RHEL4.s390",
"4ES:tar-debuginfo-0:1.14-9.RHEL4.s390x",
"4ES:tar-debuginfo-0:1.14-9.RHEL4.x86_64",
"4WS:tar-0:1.14-9.RHEL4.i386",
"4WS:tar-0:1.14-9.RHEL4.ia64",
"4WS:tar-0:1.14-9.RHEL4.ppc",
"4WS:tar-0:1.14-9.RHEL4.s390",
"4WS:tar-0:1.14-9.RHEL4.s390x",
"4WS:tar-0:1.14-9.RHEL4.src",
"4WS:tar-0:1.14-9.RHEL4.x86_64",
"4WS:tar-debuginfo-0:1.14-9.RHEL4.i386",
"4WS:tar-debuginfo-0:1.14-9.RHEL4.ia64",
"4WS:tar-debuginfo-0:1.14-9.RHEL4.ppc",
"4WS:tar-debuginfo-0:1.14-9.RHEL4.s390",
"4WS:tar-debuginfo-0:1.14-9.RHEL4.s390x",
"4WS:tar-debuginfo-0:1.14-9.RHEL4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2006:0232"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "security flaw"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…