CVE-2016-6321 log

Severity Medium
Remote Yes
Type Arbitrary file overwrite
The GNU tar archiver attempts to avoid path traversal attacks by removing offending parts of the element name at extract. This sanitizing leads to a vulnerability where the attacker can bypass the path name(s) specified on the command line leading to arbitrary overwrite of files and directories inside the target directory.
Group Package Affected Fixed Severity Status Ticket
AVG-64 tar 1.29-1 1.29-2 Medium Fixed FS#51563
Date Advisory Group Package Severity Type
03 Nov 2016 ASA-201611-11 AVG-64 tar Medium arbitrary file overwrite