CVE-2006-0300

Published: Feb 24, 2006Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.

Affected (5)

Products: Gnu: Tar

Gnu

1 product

Tar

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Gnu Tar	Version 1.14.1
Gnu Tar	Version 1.14
Gnu Tar	Version 1.15.1
Gnu Tar	Version 1.15.90
Gnu Tar	Version 1.15

References (86)

http://docs.info.apple.com/article.html?artnum=305214

Source: secalert@redhat.com

http://docs.info.apple.com/article.html?artnum=305391

Source: secalert@redhat.com

http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

Source: secalert@redhat.com

http://lists.gnu.org/archive/html/bug-tar/2006-02/msg00051.html

Source: secalert@redhat.com

http://secunia.com/advisories/18973

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/18976

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/18999

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/19016

Source: secalert@redhat.com

http://secunia.com/advisories/19093

Source: secalert@redhat.com

http://secunia.com/advisories/19130

Source: secalert@redhat.com

http://secunia.com/advisories/19152

Source: secalert@redhat.com

http://secunia.com/advisories/19236

Source: secalert@redhat.com

http://secunia.com/advisories/20042

Source: secalert@redhat.com

http://secunia.com/advisories/24479

Source: secalert@redhat.com

http://secunia.com/advisories/24966

Source: secalert@redhat.com

http://securityreason.com/securityalert/480

Source: secalert@redhat.com

http://securityreason.com/securityalert/543

Source: secalert@redhat.com

http://securitytracker.com/id?1015705

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-241646-1

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-987

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200603-06.xml

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_05_sr.html

Source: secalert@redhat.com

http://www.openpkg.org/security/OpenPKG-SA-2006.006-tar.html

Source: secalert@redhat.com

http://www.osvdb.org/23371

Source: secalert@redhat.com

Patch

http://www.redhat.com/support/errata/RHSA-2006-0232.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/430299/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/16764

Source: secalert@redhat.com

http://www.trustix.org/errata/2006/0010

Source: secalert@redhat.com

Vendor Advisory

http://www.us-cert.gov/cas/techalerts/TA07-072A.html

Source: secalert@redhat.com

US Government Resource

http://www.us-cert.gov/cas/techalerts/TA07-109A.html

Source: secalert@redhat.com

US Government Resource

http://www.vupen.com/english/advisories/2006/0684

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/0930

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1470

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/2518

Source: secalert@redhat.com

http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:046

Source: secalert@redhat.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/24855

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5252

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5978

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5993

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6094

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9295

Source: secalert@redhat.com

https://usn.ubuntu.com/257-1/

Source: secalert@redhat.com

http://docs.info.apple.com/article.html?artnum=305214