CVE-2007-4829

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-11-02 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences.

Affected products

Archive::Tar Project Archive::Tar: through 1.36
Canonical Ubuntu Linux: 6.06, 7.10, 8.04, 8.10

References

http://osvdb.org/40410
http://rt.cpan.org/Public/Bug/Display.html?id=29517
http://rt.cpan.org/Public/Bug/Display.html?id=30380
http://secunia.com/advisories/27539
http://secunia.com/advisories/33116
http://secunia.com/advisories/33314
http://www.gentoo.org/security/en/glsa/glsa-200812-10.xml
http://www.securityfocus.com/bid/26355
http://www.ubuntu.com/usn/usn-700-1
http://www.ubuntu.com/usn/usn-700-2
http://www.vupen.com/english/advisories/2007/3755
https://bugzilla.redhat.com/show_bug.cgi?id=295021

Get alerted when CVE-2007-4829 or the next vulnerability affects your stack