Security Advisory

CVE-2016-10173

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-02-01 15:00:00
Last updated 2024-08-06 03:14:42
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry.