Unrated severityNVD Advisory· Published Oct 10, 2002· Updated Jun 16, 2026
CVE-2002-0399
CVE-2002-0399
Description
Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary files during archive extraction via a (1) "/.." or (2) "./.." string, which removes the leading slash but leaves the "..", a variant of CVE-2001-1267.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
18- www.iss.net/security_center/static/10224.phpnvdVendor Advisory
- distro.conectiva.com.br/atualizacoes/nvd
- marc.infonvd
- secunia.com/advisories/19130nvd
- secunia.com/advisories/26604nvd
- secunia.com/advisories/26673nvd
- secunia.com/advisories/26987nvd
- sunsolve.sun.com/search/document.donvd
- sunsolve.sun.com/search/document.donvd
- www.linuxsecurity.com/advisories/other_advisory-2400.htmlnvd
- www.mandriva.com/security/advisoriesnvd
- www.novell.com/linux/security/advisories/2006_05_sr.htmlnvd
- www.novell.com/linux/security/advisories/2007_19_sr.htmlnvd
- www.redhat.com/support/errata/RHSA-2002-096.htmlnvd
- www.securityfocus.com/archive/1/477731/100/0/threadednvd
- www.securityfocus.com/archive/1/477865/100/0/threadednvd
- www.securityfocus.com/bid/5834nvd
- issues.rpath.com/browse/RPL-1631nvd
News mentions
0No linked articles in our index yet.