CVE-2007-4559 in Pythoninfo

Summary

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

08/27/2007

Disclosure

08/27/2007

Moderation

VulDB entry created

Entries

CPE

ready

CWE

CWE-22

CVSS

8.5

EPSS

0.90582

CTI

0.00

Sources

MITRE	https://www.cve.org/CVERecord?id=CVE-2007-4559
NVD	https://nvd.nist.gov/vuln/detail/CVE-2007-4559
CVE Details	https://www.cvedetails.com/cve/CVE-2007-4559/

◂ Previous Overview Next ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!