• info
• discussion
• exploit
• solution
• references

GNU Tar Dot_Dot Function Remote Directory Traversal Vulnerability

Solution:
Please see the references for more information.


Sun Solaris 10_sparc

• Sun 139099-03
  for SPARC
  http://sunsolve.sun.com/pdownload.do?target=139099-03&method=h

Ubuntu Ubuntu Linux 6.10 powerpc

• Ubuntu tar_1.15.91-2ubuntu0.4_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tar/tar_1.15.91-2ubuntu0 .4_powerpc.deb

Ubuntu Ubuntu Linux 7.04 i386

• Ubuntu tar_1.16-2ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tar/tar_1.16-2ubuntu0.1_ i386.deb

Gentoo app-arch/star 1.5a82

• Star star-1.5a84.tar.bz2
  ftp://ftp.berlios.de/pub/star/alpha/star-1.5a84.tar.bz2

Star Tape Archiver 1.5 a45

• Star star-1.5a84.tar.bz2
  ftp://ftp.berlios.de/pub/star/alpha/star-1.5a84.tar.bz2

Apple Mac OS X 10.4.11

• Apple Security Update 2007-009 (10.4.11 PPC)
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16521&cat= 1&platform=osx&method=sa/SecUpd2007-009Univ.dmg


• Apple Security Update 2007-009 (10.4.11 Universal)
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16521&cat= 1&platform=osx&method=sa/SecUpd2007-009Univ.dmg

Apple Mac OS X Server 10.4.11

• Apple Security Update 2007-009 (10.4.11 PPC)
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16521&cat= 1&platform=osx&method=sa/SecUpd2007-009Univ.dmg


• Apple Security Update 2007-009 (10.4.11 Universal)
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=16521&cat= 1&platform=osx&method=sa/SecUpd2007-009Univ.dmg