CVE-2006-6097

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 11.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-11-24 · updated 2026-06-16

Description

GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216.

Affected products

GNU Tar: 1.15.1, 1.16

References

http://docs.info.apple.com/article.html?artnum=305214
http://kb.vmware.com/KanisaPlatform/Publishing/817/2240267_f.SAL_Public.html
http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050812.html
http://rhn.redhat.com/errata/RHSA-2006-0749.html
http://secunia.com/advisories/23115
http://secunia.com/advisories/23117
http://secunia.com/advisories/23142
http://secunia.com/advisories/23146
http://secunia.com/advisories/23163
http://secunia.com/advisories/23173

Get alerted when CVE-2006-6097 or the next vulnerability affects your stack