Rapid7 Vulnerability & Exploit Database

RHSA-2002:096: Updated unzip and tar packages fix vulnerabilities

Back to Search

RHSA-2002:096: Updated unzip and tar packages fix vulnerabilities

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
10/28/2002
Created
07/25/2018
Added
10/28/2005
Modified
07/04/2017

Description

The unzip and tar utilities contain vulnerabilities which can allow arbitrary files to be overwritten during archive extraction.

The unzip and tar utilities are used for manipulating archives, which are multiple files stored inside of a single file. A directory traversal vulnerability in unzip version 5.42 and earlier, as well as GNU tar 1.13.19 and earlier, allows attackers to overwrite arbitrary files during archive extraction via a ".." (dot dot) in an extracted filename. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2001-1267 and CAN-2001-1268 to this issue. In addition, unzip version 5.42 and earlier also allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the "/" (slash) character. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2001-1269 to this issue. During testing of the fix to GNU tar, it was discovered that GNU tar 1.13.25 was still vulnerable to a modified version of the same problem. Red Hat has provided a patch to tar 1.3.25 to correct this problem. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2002-0399 to this issue. Users of unzip and tar are advised to upgrade to these errata packages, containing unzip version 5.50 (for Red Hat Linux 6.2, 7, 7.1, and 7.2) and a patched version of GNU tar 1.13.25 (for Red Hat Linux 6.2, 7, 7.1, 7.2, and 7.3), which are not vulnerable to these issues. Important Note: For users of Red Hat Linux 6.2 and 7 only, these errata packages change one of the command line options for tar. Previously the '-I' option was used to enable bzip2 compression, while in these errata packages the option has changed to '-j'.

Solution(s)

  • redhat-upgrade-tar
  • redhat-upgrade-unzip

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;