CVE-2006-0931: PEAR::Archive_Tar Directory Traversal vulnerability
Directory traversal vulnerability in PEAR::ArchiveTar 1.2, and other versions before 1.3.2, allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a TAR archive.
Other sources
PEAR::ArchiveTar Directory Traversal vulnerability
— Packagist
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/pear/archive_tarto a version that resolves this vulnerability.Fixed in 1.3.2 - Upgrade
Upgrade
PEAR::Archive_Tarto a version that resolves this vulnerability.Fixed in 1.3.2
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0931?
CVE-2006-0931 is rated as a critical vulnerability due to its ability to allow remote attackers to overwrite arbitrary files.
How do I fix CVE-2006-0931?
To fix CVE-2006-0931, upgrade PEAR::Archive_Tar to version 1.3.2 or later.
Which versions are affected by CVE-2006-0931?
CVE-2006-0931 affects PEAR::Archive_Tar versions 1.2 and 1.3.1 or earlier.
What types of attacks are possible with CVE-2006-0931?
CVE-2006-0931 allows directory traversal attacks that can lead to file creation and overwriting.
Is CVE-2006-0931 a local or remote vulnerability?
CVE-2006-0931 is considered a remote vulnerability, allowing attackers to exploit it without local access.