National Cyber-Alert System

Vulnerability Summary for CVE-2006-6097

Overview

GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Vendor Statments (disclaimer)

Official Statement from Red Hat (03/14/2007)

Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA07-072A

Name: TA07-072A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA07-072A.html

External Source: MISC

Name: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216937

Hyperlink:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216937

External Source: UBUNTU

Name: USN-385-1

Hyperlink:http://www.ubuntu.com/usn/usn-385-1

External Source: BID

Name: 21235

Hyperlink:http://www.securityfocus.com/bid/21235

External Source: VUPEN

Name: ADV-2006-4717

Hyperlink:http://www.frsirt.com/english/advisories/2006/4717

External Source: FULLDISC

Name: 20061121 GNU tar directory traversal

Hyperlink:http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050812.html

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-821

Hyperlink:https://issues.rpath.com/browse/RPL-821

External Source: CONFIRM

Name: http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html

Hyperlink:http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html

External Source: TRUSTIX

Name: 2006-0068

Hyperlink:http://www.trustix.org/errata/2006/0068/

External Source: BUGTRAQ

Name: 20070330 VMSA-2007-0002 VMware ESX security updates

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/464268/100/0/threaded

External Source: BUGTRAQ

Name: 20061201 rPSA-2006-0222-1 tar

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/453286/100/0/threaded

External Source: OPENPKG

Name: OpenPKG-SA-2006.038

Hyperlink:http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.038.html

External Source: MANDRIVA

Name: MDKSA-2006:219

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:219

External Source: VUPEN

Name: ADV-2007-1171

Hyperlink:http://www.frsirt.com/english/advisories/2007/1171

External Source: VUPEN

Name: ADV-2007-0930

Hyperlink:http://www.frsirt.com/english/advisories/2007/0930

External Source: VUPEN

Name: ADV-2006-5102

Hyperlink:http://www.frsirt.com/english/advisories/2006/5102

External Source: DEBIAN

Name: DSA-1223

Hyperlink:http://www.debian.org/security/2006/dsa-1223

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2007-015.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2007-015.htm

External Source: SLACKWARE

Name: SSA:2006-335-01

Hyperlink:http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.469379

External Source: SECTRACK

Name: 1017423

Hyperlink:http://securitytracker.com/id?1017423

External Source: SREASON

Name: 1918

Hyperlink:http://securityreason.com/securityalert/1918

External Source: GENTOO

Name: GLSA-200612-10

Hyperlink:http://security.gentoo.org/glsa/glsa-200612-10.xml

External Source: FREEBSD

Name: SA-06:26

Hyperlink:http://security.freebsd.org/advisories/FreeBSD-SA-06:26.gtar.asc

External Source: SECUNIA

Name: 24636

Hyperlink:http://secunia.com/advisories/24636

External Source: SECUNIA

Name: 24479

Hyperlink:http://secunia.com/advisories/24479

External Source: SECUNIA

Name: 23911

Hyperlink:http://secunia.com/advisories/23911

External Source: SECUNIA

Name: 23514

Hyperlink:http://secunia.com/advisories/23514

External Source: SECUNIA

Name: 23443

Hyperlink:http://secunia.com/advisories/23443

External Source: SECUNIA

Name: 23314

Hyperlink:http://secunia.com/advisories/23314

External Source: SECUNIA

Name: 23209

Hyperlink:http://secunia.com/advisories/23209

External Source: SECUNIA

Name: 23198

Hyperlink:http://secunia.com/advisories/23198

External Source: SECUNIA

Name: 23173

Hyperlink:http://secunia.com/advisories/23173

External Source: SECUNIA

Name: 23163

Hyperlink:http://secunia.com/advisories/23163

External Source: SECUNIA

Name: 23146

Hyperlink:http://secunia.com/advisories/23146

External Source: SECUNIA

Name: 23142

Hyperlink:http://secunia.com/advisories/23142

External Source: SECUNIA

Name: 23117

Hyperlink:http://secunia.com/advisories/23117

External Source: SECUNIA

Name: 23115

Hyperlink:http://secunia.com/advisories/23115

External Source: REDHAT

Name: RHSA-2006:0749

Hyperlink:http://rhn.redhat.com/errata/RHSA-2006-0749.html

External Source: APPLE

Name: APPLE-SA-2007-03-13

Hyperlink:http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

External Source: CONFIRM

Name: http://kb.vmware.com/KanisaPlatform/Publishing/817/2240267_f.SAL_Public.html

Hyperlink:http://kb.vmware.com/KanisaPlatform/Publishing/817/2240267_f.SAL_Public.html

External Source: MANDRIVA

Name: MDKSA-2006:219

Hyperlink:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:219

External Source: CONFIRM

Name: http://docs.info.apple.com/article.html?artnum=305214

Hyperlink:http://docs.info.apple.com/article.html?artnum=305214

External Source: SGI

Name: 20061202-01-P

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc