CVE-2007-4559

CVSS 9.8 CRITICALEPSS 27.1%CWE-22

Vexday Risk Score

53Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 9.8EPSS 27.1%KEV nãoPoC públicaNuclei —Metasploit —Patch referenciado

Lifecycle

28 Aug 2007Published on NVD

20 Sep 2022Public PoC

Recommendation: Plan a near-term fix — a public PoC already exists.

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

n/a · n/a

public PoCs found — 7

githubgithub.com/advanced-threat-research/Creosote★ 82 githubgithub.com/depers-rus/CVE-2007-4559★ 1 githubgithub.com/davidholiday/CVE-2007-4559★ 0 githubgithub.com/m0d0ri205/wargame-tarpioka★ 0 githubgithub.com/jithinodattu/CVE-2007-4559-lab★ 0 githubgithub.com/luigigubello/trellix-tarslip-patch-bypass★ 0 githubgithub.com/Ooscaar/MALW★ 0

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References