Mô tả CVE

GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216.

Thông tin CVE

Số liệu

Số liệu	Điểm	Mức độ nghiêm trọng	CVSS Vector	Nguồn
V2	4		AV:N/AC:H/Au:N/C:N/I:P/A:P	nvd@nist.gov

EPSS

EPSS là mô hình tính điểm dự đoán khả năng một lỗ hổng bị khai thác.

Điểm EPSS

Mô hình EPSS tạo ra điểm xác suất từ 0 đến 1 (0 đến 100%). Điểm càng cao, xác suất một lỗ hổng bị khai thác càng lớn.

Phân vị EPSS

Phân vị được dùng để xếp hạng CVE theo điểm EPSS. Ví dụ, một CVE ở phân vị thứ 95 theo điểm EPSS có nhiều khả năng bị khai thác hơn 95% CVE khác. Do đó, phân vị được dùng để so sánh điểm EPSS của một CVE với các CVE khác.

EPSS First.org

Thông tin khai thác

Exploit Database EDB-ID : 29160

Ngày xuất bản : 2006-11-20 23h00 +00:00
Tác giả : Teemu Salmela
EDB đã xác minh : Yes

Sản phẩm được đề cập

Cấu hình 0

Gnu>>Tar >> Version 1.15.1

Gnu>>Tar >> Version 1.16

Tài liệu tham khảo

http://secunia.com/advisories/23117
Tags : third-party-advisory, x_refsource_SECUNIA

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10963
Tags : vdb-entry, signature, x_refsource_OVAL

https://issues.rpath.com/browse/RPL-821
Tags : x_refsource_CONFIRM

http://securityreason.com/securityalert/1918
Tags : third-party-advisory, x_refsource_SREASON

http://www.us-cert.gov/cas/techalerts/TA07-072A.html
Tags : third-party-advisory, x_refsource_CERT

http://www.securityfocus.com/bid/21235
Tags : vdb-entry, x_refsource_BID

http://secunia.com/advisories/23146
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050812.html
Tags : mailing-list, x_refsource_FULLDISC

http://kb.vmware.com/KanisaPlatform/Publishing/817/2240267_f.SAL_Public.html
Tags : x_refsource_CONFIRM

http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
Tags : vendor-advisory, x_refsource_APPLE

http://secunia.com/advisories/23209
Tags : third-party-advisory, x_refsource_SECUNIA

http://docs.info.apple.com/article.html?artnum=305214
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2006/5102
Tags : vdb-entry, x_refsource_VUPEN

http://www.trustix.org/errata/2006/0068/
Tags : vendor-advisory, x_refsource_TRUSTIX

http://secunia.com/advisories/23142
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/23314
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2007/1171
Tags : vdb-entry, x_refsource_VUPEN

http://support.avaya.com/elmodocs2/security/ASA-2007-015.htm
Tags : x_refsource_CONFIRM

http://security.gentoo.org/glsa/glsa-200612-10.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://secunia.com/advisories/23198
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/23115
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html
Tags : x_refsource_CONFIRM

http://www.securityfocus.com/archive/1/453286/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://secunia.com/advisories/23911
Tags : third-party-advisory, x_refsource_SECUNIA

ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc
Tags : vendor-advisory, x_refsource_SGI

http://www.ubuntu.com/usn/usn-385-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://www.securityfocus.com/archive/1/464268/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://secunia.com/advisories/23173
Tags : third-party-advisory, x_refsource_SECUNIA

http://rhn.redhat.com/errata/RHSA-2006-0749.html
Tags : vendor-advisory, x_refsource_REDHAT

http://security.freebsd.org/advisories/FreeBSD-SA-06:26.gtar.asc
Tags : vendor-advisory, x_refsource_FREEBSD

http://securitytracker.com/id?1017423
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/24636
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.debian.org/security/2006/dsa-1223
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.vupen.com/english/advisories/2007/0930
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/23443
Tags : third-party-advisory, x_refsource_SECUNIA

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=216937
Tags : x_refsource_MISC

http://www.mandriva.com/security/advisories?name=MDKSA-2006:219
Tags : vendor-advisory, x_refsource_MANDRIVA

http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.038.html
Tags : vendor-advisory, x_refsource_OPENPKG

http://www.vupen.com/english/advisories/2006/4717
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/23514
Tags : third-party-advisory, x_refsource_SECUNIA

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.469379
Tags : vendor-advisory, x_refsource_SLACKWARE

http://secunia.com/advisories/24479
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/23163
Tags : third-party-advisory, x_refsource_SECUNIA

Ngày	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	15.27%	–	–
2022-03-13	–	–	15.27%	–	–
2022-04-03	–	–	15.27%	–	–
2023-03-12	–	–	–	0.82%	–
2023-03-26	–	–	–	0.75%	–
2023-04-30	–	–	–	0.89%	–
2023-07-16	–	–	–	1.03%	–
2023-08-27	–	–	–	1.09%	–
2023-10-01	–	–	–	1.28%	–
2023-12-17	–	–	–	1.52%	–
2024-02-11	–	–	–	1.52%	–
2024-06-02	–	–	–	1.02%	–
2024-06-08	–	–	–	1.43%	–
2024-10-20	–	–	–	1.01%	–
2024-12-22	–	–	–	2.49%	–
2025-01-19	–	–	–	2.49%	–
2025-03-18	–	–	–	–	9.24%
2025-04-06	–	–	–	–	7.07%
2025-07-13	–	–	–	–	7.34%
2025-10-27	–	–	–	–	7.52%
2025-11-09	–	–	–	–	5.64%
2025-11-18	–	–	–	–	5.64%
2025-11-21	–	–	–	–	5.64%
2025-12-24	–	–	–	–	10.44%

Ngày	Phân vị
2022-02-06	91%
2022-03-13	92%
2022-04-03	96%
2023-03-12	79%
2023-03-26	78%
2023-04-30	8%
2023-07-16	82%
2023-08-27	83%
2023-10-01	84%
2023-12-17	86%
2024-02-11	87%
2024-06-02	84%
2024-06-08	87%
2024-10-20	84%
2024-12-22	9%
2025-01-19	9%
2025-03-18	92%
2025-04-06	91%
2025-07-13	91%
2025-10-27	91%
2025-11-09	9%
2025-11-18	89%
2025-11-21	9%
2025-12-24	93%

CVE-2006-6097 : Chi tiết

CVE-2006-6097