CVE-2006-0931

NameCVE-2006-0931
DescriptionDirectory traversal vulnerability in PEAR::Archive_Tar 1.2, and other versions before 1.3.2, allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a TAR archive.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs368545

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
php4source(unstable)(unfixed)unimportant368545
php5source(unstable)(unfixed)unimportant368545

Notes

is this really a vulnerability in pear? it seems it should be a bug
in any application not checking for such archives.
Lack of a security feature is not a vulnerability

Search for package or bug name: Reporting problems