Directory Traversal Vulnerabilities in Libtar by Debian
CVE-2013-4420
Currently unrated
What is CVE-2013-4420?
Libtar versions 1.2.20 and earlier have multiple directory traversal vulnerabilities in the tar_extract_glob and tar_extract_all functions. These flaws allow remote attackers to exploit crafted tar files by manipulating the filename conventions, particularly leveraging the '../' sequences to overwrite arbitrary system files. This presents a significant risk for systems utilizing the affected versions, leading to potential unauthorized code execution or significant data breaches.