p PatchFirst

CVE-2011-5325

CVE-2011-5325

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlink.

CVSS 7.5 · High · EPSS 7.0% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • busybox Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:1.27.2-1

    Update to 1:1.27.2-1

  • busybox Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:1.27.2-1

    Update to 1:1.27.2-1

  • busybox Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:1.27.2-1

    Update to 1:1.27.2-1

  • busybox Ubuntu:14.04:LTS

    Versions
    • 1:1.20.0-8.1ubuntu1
    • 1:1.20.0-9ubuntu1
    • 1:1.20.0-9ubuntu2
    • 1:1.21.0-1ubuntu1
    Affected ranges
    • ECOSYSTEM: < 1:1.21.0-1ubuntu1.4

    Update to 1:1.21.0-1ubuntu1.4

  • busybox Ubuntu:16.04:LTS

    Versions
    • 1:1.22.0-15ubuntu1
    Affected ranges
    • ECOSYSTEM: < 1:1.22.0-15ubuntu1.4

    Update to 1:1.22.0-15ubuntu1.4

  • busybox Ubuntu:18.04:LTS

    Versions
    • 1:1.22.0-19ubuntu2
    • 1:1.27.2-1ubuntu3
    • 1:1.27.2-1ubuntu4
    • 1:1.27.2-2ubuntu2
    Affected ranges
    • ECOSYSTEM: < 1:1.27.2-2ubuntu3

    Update to 1:1.27.2-2ubuntu3

Original sources

Check your server →