Total vulnerabilities in the database
The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".
| Software | From | Fixed in |
|---|---|---|
| gnu / tar | 1.13.25 | 1.13.25.x |
| redhat / enterprise_linux | 2.1 | 2.1.x |
| redhat / enterprise_linux_desktop | 3.0 | 3.0.x |
| redhat / linux_advanced_workstation | 2.1 | 2.1.x |
| redhat / enterprise_linux | 3.0 | 3.0.x |