CVE-2007-4829: Path Traversal
Directory traversal vulnerability in Archive::Tar perl module allows user-assisted remote attackers to overwrite arbitrary files writable by user running application using this module via an absolute path or a .. (dot dot) sequence in filenames in a TAR archive.
Similar issues were reported and fixed for GNU tar during past several years, e.g.: CVE-2001-1267, CVE-2002-0399, CVE-2002-1216 and CVE-2007-4131.
This issue is important when this module is used to extract tar archives from untrusted sources. However, some of such applications either implement workarounds / own checks (sa-update in spamassassin) or dropped module support at all (amavisd-new).
Other sources
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2007-4829?
CVE-2007-4829 is a directory traversal vulnerability in the Archive::Tar Perl module that allows attackers to overwrite arbitrary files through specially crafted TAR archives.
What is the severity of CVE-2007-4829?
CVE-2007-4829 is considered a critical vulnerability due to its potential to compromise system integrity by allowing file overwriting.
How do I fix CVE-2007-4829?
To fix CVE-2007-4829, you should upgrade the Archive::Tar module to version 1.37 or later.
Which software is affected by CVE-2007-4829?
CVE-2007-4829 affects Archive::Tar Perl module versions 1.36 and earlier, as well as various versions of Ubuntu Linux that utilize this module.
Can CVE-2007-4829 be exploited remotely?
Yes, CVE-2007-4829 can be exploited by remote attackers but requires user assistance to process a malicious TAR archive.