Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.
| Software | From | Fixed in |
|---|---|---|
| redhat / fedora | 7 | 7.x |