https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 02:35:50 +0000 https://vulnerability.circl.lu/vuln/cve-2016-6321 <p>Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name parameter, aka POINTYFEATHER.</p> <p>Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name parameter, aka POINTYFEATHER.</p> https://vulnerability.circl.lu/vuln/cve-2016-6321 https://vulnerability.circl.lu/vuln/usn-3132-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tar, Ubuntu:16.04:LTS: tar</p> <p>Harry Sintonen discovered that tar incorrectly handled extracting files when path names are specified on the command line. If a user or automated system were tricked into processing a specially crafted archive, an attacker could possibly overwrite arbitrary files.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tar, Ubuntu:16.04:LTS: tar</p> <p>Harry Sintonen discovered that tar incorrectly handled extracting files when path names are specified on the command line. If a user or automated system were tricked into processing a specially crafted archive, an attacker could possibly overwrite arbitrary files.</p> https://vulnerability.circl.lu/vuln/usn-3132-1