← Database

CVE-2007-4134

MEDIUM CVSS: 6.8 Published: 2007-08-30 Modified: 2026-06-16

Description

Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.

Affected Platforms

Redhat Fedora

Weakness Type

CWE-22

References