cve/2013/CVE-2013-4420.md

CVE-2013-4420

Description

Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (dot dot) in a crafted tar file.

POC

Reference

No PoCs from references.

Github

• https://github.com/andir/nixos-issue-db-example