CVE-2005-1918
EPSS 2.1%
Description
The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".
How to fix CVE-2005-1918
To remediate CVE-2005-1918, upgrade the affected package to a fixed version below.
- Debian/tar—upgrade to 1.14-2.2 or later
Is CVE-2005-1918 being exploited?
Low — EPSS is 2.1%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 1.14-2.2