CVE-2006-6097: Medium severity GNU tar vulnerability
GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPENAMES record with a symbolic link, which is not properly handled by the extractarchive function in extract.c and extractmangle function in mangle.c, a variant of CVE-2002-1216.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6097?
CVE-2006-6097 has a moderate severity rating due to its ability to allow user-assisted attacks that can overwrite arbitrary files.
How do I fix CVE-2006-6097?
To fix CVE-2006-6097, it is recommended to upgrade to a patched version of GNU tar that does not allow handling of symbolic links in a malicious manner.
Which versions of GNU tar are affected by CVE-2006-6097?
CVE-2006-6097 affects GNU tar versions 1.15.1 and 1.16, among possibly others.
Can CVE-2006-6097 be exploited remotely?
CVE-2006-6097 is not a remote vulnerability; it requires user interaction with a specially crafted tar file.
What symptoms might indicate a CVE-2006-6097 attack?
Symptoms of a CVE-2006-6097 attack may include unexpected overwriting of files or changes to file contents after extracting a tar file.