Unrated severityNVD Advisory· Published Aug 30, 2007· Updated Jun 16, 2026
CVE-2007-4134
CVE-2007-4134
Description
Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:o:redhat:fedora:7:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
17- www.redhat.com/archives/fedora-package-announce/2007-August/msg00425.htmlnvdPatch
- bugs.gentoo.org/show_bug.cginvdPatch
- ftp.berlios.de/pub/star/alpha/AN-1.5a84nvd
- patches.sgi.com/support/free/security/advisories/20070901-01-P.ascnvd
- secunia.com/advisories/26626nvd
- secunia.com/advisories/26672nvd
- secunia.com/advisories/26673nvd
- secunia.com/advisories/26857nvd
- secunia.com/advisories/27318nvd
- secunia.com/advisories/27544nvd
- securitytracker.com/idnvd
- support.avaya.com/elmodocs2/security/ASA-2007-414.htmnvd
- www.gentoo.org/security/en/glsa/glsa-200710-23.xmlnvd
- www.redhat.com/support/errata/RHSA-2007-0873.htmlnvd
- www.securityfocus.com/archive/1/478797/100/200/threadednvd
- issues.rpath.com/browse/RPL-1669nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11098nvd
News mentions
0No linked articles in our index yet.