>> OpenPKG Security Update Fixes GNU Tar File Extraction Directory Traversal Issue
Title : OpenPKG Security Update Fixes GNU Tar File Extraction Directory Traversal Issue VUPEN ID : VUPEN/ADV-2006-4915 CVE ID : CVE-2006-6097
Rated as : Moderate Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2006-12-09
Technical Description
OpenPKG has released updated packages to address a vulnerability identified in GNU Tar. This flaw could be exploited by malicious people to conduct directory traversal attacks. For additional information, see : VUPEN/ADV-2006-4717
