CVE-2007-4829: Path Traversal

Reference Links

• http://rt.cpan.org/Public/Bug/Display.html?id=29517
• https://bugzilla.redhat.com/show_bug.cgi?id=295021
• http://rt.cpan.org/Public/Bug/Display.html?id=30380
• https://issues.rpath.com/browse/RPL-1716
• http://www.securityfocus.com/bid/26355
• http://secunia.com/advisories/27539
• http://osvdb.org/40410
• http://www.ubuntu.com/usn/usn-700-1
• http://secunia.com/advisories/33314
• http://www.ubuntu.com/usn/usn-700-2
• http://www.gentoo.org/security/en/glsa/glsa-200812-10.xml
• http://secunia.com/advisories/33116
• http://www.vupen.com/english/advisories/2007/3755
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38285
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11658
• https://access.redhat.com/security/cve/CVE-2001-1267
• https://access.redhat.com/security/cve/CVE-2002-0399
• https://access.redhat.com/security/cve/CVE-2002-1216
• https://access.redhat.com/security/cve/CVE-2007-4131
• http://marc.info/?l=bugtraq&m=90674255917321
• http://rt.cpan.org/Ticket/Display.html?id=30380#txn-436899
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=295021#c12
• http://admin.fedoraproject.org/updates/perl-5.10.0-52.fc10
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=514322
• https://www.redhat.com/security/data/cve/CVE-2007-4829.html
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=295021#c16
• https://rhn.redhat.com/errata/RHSA-2010-0505.html
• https://www.cve.org/CVERecord?id=CVE-2007-4829 https://nvd.nist.gov/vuln/detail/CVE-2007-4829
• https://access.redhat.com/errata/RHSA-2010:0505
• https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4829.json

Parent vulnerabilities

(Appears in the following advisories)

• RHSA-2010:0505

Frequently Asked Questions

• What is CVE-2007-4829?

  CVE-2007-4829 is a directory traversal vulnerability in the Archive::Tar Perl module that allows attackers to overwrite arbitrary files through specially crafted TAR archives.

• What is the severity of CVE-2007-4829?

  CVE-2007-4829 is considered a critical vulnerability due to its potential to compromise system integrity by allowing file overwriting.

• How do I fix CVE-2007-4829?

  To fix CVE-2007-4829, you should upgrade the Archive::Tar module to version 1.37 or later.

• Which software is affected by CVE-2007-4829?

  CVE-2007-4829 affects Archive::Tar Perl module versions 1.36 and earlier, as well as various versions of Ubuntu Linux that utilize this module.

• Can CVE-2007-4829 be exploited remotely?

  Yes, CVE-2007-4829 can be exploited by remote attackers but requires user assistance to process a malicious TAR archive.