CVE-2005-1918 PUBLISHED CVSS 2.5999999046325684 LOW

The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".

EPSS 2.06% · 83.8th percentile

Risk Scores

CVSS v2.0
2.5999999046325684
EPSS Score
2.06%
83.8th percentile

Affected Products

VendorProductVersions
redhatenterprise_linux3.0, 3.0, 2.1
n/an/an/a
redhatlinux_advanced_workstation2.1, 2.1
gnutar1.13.25
redhatenterprise_linux_desktop3.0

Timeline

References

Open in Interactive Console →