Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2016-10173

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-h5g2-38x9-4gv3

archive-tar-minitar and minitar vulnerable to Path Traversal Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a `..` (dot dot) in a TAR archive entry.

gitlab/gem/archive-tar-minitar/CVE-2016-10173

Directory Traversal Vulnerability Minitar allows attackers to overwrite arbitrary files during archive extraction via a `..` in an extracted filename.

gitlab/gem/minitar/CVE-2016-10173

Directory Traversal Vulnerability Minitar allows attackers to overwrite arbitrary files during archive extraction via a `..` in an extracted filename.

ruby_advisory_db/gems/archive-tar-minitar/CVE-2016-10173

Archive-Tar-Minitar Directory Traversal Vulnerability Minitar allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename. Analogous vulnerabilities for unzip and tar: https://www.cvedetails.com/cve/CVE-2001-1268/ and http://www.cvedetails.com/cve/CVE-2001-1267/ Credit: ecneladis

ruby_advisory_db/gems/minitar/CVE-2016-10173

Minitar Directory Traversal Vulnerability Minitar allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename. Analogous vulnerabilities for unzip and tar: https://www.cvedetails.com/cve/CVE-2001-1268/ and http://www.cvedetails.com/cve/CVE-2001-1267/ Credit: ecneladis