VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 20, 2014· Updated Apr 29, 2026

CVE-2013-4420

CVE-2013-4420

Description

Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (dot dot) in a crafted tar file.

Affected products

9
  • Feep/Libtar9 versions
    cpe:2.3:a:feep:libtar:*:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:feep:libtar:*:*:*:*:*:*:*:*range: <=1.2.20
    • cpe:2.3:a:feep:libtar:1.2.11:*:*:*:*:*:*:*
    • cpe:2.3:a:feep:libtar:1.2.13:*:*:*:*:*:*:*
    • cpe:2.3:a:feep:libtar:1.2.14:*:*:*:*:*:*:*
    • cpe:2.3:a:feep:libtar:1.2.15:*:*:*:*:*:*:*
    • cpe:2.3:a:feep:libtar:1.2.16:*:*:*:*:*:*:*
    • cpe:2.3:a:feep:libtar:1.2.17:*:*:*:*:*:*:*
    • cpe:2.3:a:feep:libtar:1.2.18:*:*:*:*:*:*:*
    • cpe:2.3:a:feep:libtar:1.2.19:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.