[Bug 15106] New: thre is a directory traversal vulnerability of "tar" appet

[bugzilla at busybox.net]

https://bugs.busybox.net/show_bug.cgi?id=15106

            Bug ID: 15106
           Summary: thre is a directory traversal vulnerability of "tar"
                    appet
           Product: Busybox
           Version: unspecified
          Hardware: All
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Other
          Assignee: unassigned at busybox.net
          Reporter: alligatorking at 126.com
                CC: busybox-cvs at busybox.net
  Target Milestone: ---

In general case, it is not allowed to create files or soft links outside the
decompression directory. However, by constructing multiple soft links with the
same name to exploit two cycles of extracting, creating any soft link at any
location pointing to any target file is possible.

An poc is given , which shows that after executing tar to process the special
file, the “rm”is hijacked.

-- 
You are receiving this mail because:
You are on the CC list for the bug.