RHSA-2002%3A138 | Vulnetix

RHSA-2002%3A138 PUBLISHED CVSS 8.5 HIGH

Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot).

Risk Scores

CVSS 4.0

8.5

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux AS (Advanced Server) version 2.1

Timeline

Oct 2, 2002 CVE Published
Jan 13, 2026 CVE Updated
Aug 7, 2026 Distribution Patch
Aug 7, 2026 Distribution Patch
Aug 7, 2026 Security Advisory
Aug 7, 2026 Security Advisory
Aug 7, 2026 Security Advisory
Aug 7, 2026 Security Advisory
Aug 7, 2026 Security Advisory
Aug 7, 2026 Security Advisory

References

https://access.redhat.com/errata/RHSA-2002:138 advisory
https://access.redhat.com/security/updates/classification/#low advisory
http://online.securityfocus.com/archive/1/196445 advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2002/rhsa-2002_138.json advisory
https://access.redhat.com/security/cve/CVE-2001-1267 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1616656 issue
https://www.cve.org/CVERecord?id=CVE-2001-1267 advisory
https://nvd.nist.gov/vuln/detail/CVE-2001-1267 advisory
https://access.redhat.com/security/cve/CVE-2001-1268 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1616657 issue
https://www.cve.org/CVERecord?id=CVE-2001-1268 advisory
https://nvd.nist.gov/vuln/detail/CVE-2001-1268 advisory
https://access.redhat.com/security/cve/CVE-2001-1269 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1616658 issue
https://www.cve.org/CVERecord?id=CVE-2001-1269 advisory
https://nvd.nist.gov/vuln/detail/CVE-2001-1269 advisory
https://access.redhat.com/security/cve/CVE-2002-0399 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1616773 issue
https://www.cve.org/CVERecord?id=CVE-2002-0399 advisory
https://nvd.nist.gov/vuln/detail/CVE-2002-0399 advisory

…and 4 more

Open in Interactive Console →