CVE-2005-1918

Published: Dec 31, 2005Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".

Affected (13)

Products: Gnu: Tar · Redhat: Enterprise Linux, Enterprise Linux Desktop, Linux Advanced Workstation

1 product

3 products

Enterprise Linux

Enterprise Linux Desktop

Linux Advanced Workstation

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Tar	Version 1.13.25

Configuration B

12 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux Desktop	Version 3.0
Redhat Linux Advanced Workstation	Version 2.1
Redhat Linux Advanced Workstation	Version 2.1

Related CWEs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (26)

ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc (unsafe URL)

Source: secalert@redhat.com

http://secunia.com/advisories/18988

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/19130

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/19183

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/20397

Source: secalert@redhat.com

Vendor Advisory

http://securitytracker.com/id?1015655

Source: secalert@redhat.com

Patch

http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_05_sr.html

Source: secalert@redhat.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2006-0195.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.securityfocus.com/archive/1/430297/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/5834

Source: secalert@redhat.com

Patch

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9946

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18988

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/19130

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/19183

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/20397

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1015655

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2006_05_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2006-0195.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/archive/1/430297/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/5834

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9946

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.