National Cyber Awareness System

Vulnerability Summary for CVE-2006-0300

Overview

Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.

Impact

CVSS Severity (version 2.0 upgrade from v1.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA07-109A

Name: TA07-109A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA07-109A.html

US-CERT Technical Alert: TA07-072A

Name: TA07-072A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA07-072A.html

External Source: MANDRIVA

Name: MDKSA-2006:046

Type: Advisory; Patch Information

Hyperlink:http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:046

External Source: OSVDB

Name: 23371

Type: Patch Information

Hyperlink:http://www.osvdb.org/23371

External Source: SECUNIA

Name: 18999

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/18999

External Source: SECUNIA

Name: 18976

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/18976

External Source: XF

Name: gnu-tar-pax-headers-bo(24855)

Hyperlink:http://xforce.iss.net/xforce/xfdb/24855

External Source: VUPEN

Name: ADV-2008-2518

Hyperlink:http://www.vupen.com/english/advisories/2008/2518

External Source: VUPEN

Name: ADV-2007-1470

Hyperlink:http://www.vupen.com/english/advisories/2007/1470

External Source: VUPEN

Name: ADV-2007-0930

Hyperlink:http://www.vupen.com/english/advisories/2007/0930

External Source: VUPEN

Name: ADV-2006-0684

Hyperlink:http://www.vupen.com/english/advisories/2006/0684

External Source: UBUNTU

Name: USN-257-1

Type: Advisory

Hyperlink:http://www.ubuntulinux.org/support/documentation/usn/usn-257-1

External Source: TRUSTIX

Name: 2006-0010

Type: Advisory

Hyperlink:http://www.trustix.org/errata/2006/0010

External Source: BID

Name: 16764

Hyperlink:http://www.securityfocus.com/bid/16764

External Source: FEDORA

Name: FLSA:183571-2

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/430299/100/0/threaded

External Source: REDHAT

Name: RHSA-2006:0232

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0232.html

External Source: OPENPKG

Name: OpenPKG-SA-2006.006

Hyperlink:http://www.openpkg.org/security/OpenPKG-SA-2006.006-tar.html

External Source: SUSE

Name: SUSE-SR:2006:005

Hyperlink:http://www.novell.com/linux/security/advisories/2006_05_sr.html

External Source: GENTOO

Name: GLSA-200603-06

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200603-06.xml

External Source: DEBIAN

Name: DSA-987

Hyperlink:http://www.debian.org/security/2006/dsa-987

External Source: SUNALERT

Name: 241646

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-26-241646-1

External Source: SECTRACK

Name: 1015705

Hyperlink:http://securitytracker.com/id?1015705

External Source: SECUNIA

Name: 19236

Hyperlink:http://secunia.com/advisories/19236

External Source: SECUNIA

Name: 19152

Hyperlink:http://secunia.com/advisories/19152

External Source: SECUNIA

Name: 19130

Hyperlink:http://secunia.com/advisories/19130

External Source: SECUNIA

Name: 19093

Hyperlink:http://secunia.com/advisories/19093

External Source: SECUNIA

Name: 19016

Hyperlink:http://secunia.com/advisories/19016

External Source: SECUNIA

Name: 18973

Type: Advisory

Hyperlink:http://secunia.com/advisories/18973

External Source: OVAL

Name: oval:org.mitre.oval:def:9295

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9295

External Source: OVAL

Name: oval:org.mitre.oval:def:6094

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6094

External Source: OVAL

Name: oval:org.mitre.oval:def:5993

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5993

External Source: OVAL

Name: oval:org.mitre.oval:def:5978

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5978

External Source: OVAL

Name: oval:org.mitre.oval:def:5252

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5252

External Source: MLIST

Name: [Bug-tar] 20060220 tar 1.15.90 released

Hyperlink:http://lists.gnu.org/archive/html/bug-tar/2006-02/msg00051.html

External Source: SREASON

Name: 543

Hyperlink:http://securityreason.com/securityalert/543

External Source: SREASON

Name: 480

Hyperlink:http://securityreason.com/securityalert/480

External Source: SECUNIA

Name: 24966

Hyperlink:http://secunia.com/advisories/24966

External Source: SECUNIA

Name: 24479

Hyperlink:http://secunia.com/advisories/24479

External Source: SECUNIA

Name: 20042

Hyperlink:http://secunia.com/advisories/20042

External Source: APPLE

Name: APPLE-SA-2007-03-13

Hyperlink:http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

External Source: APPLE

Name: APPLE-SA-2007-04-19

Hyperlink:http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html

External Source: CONFIRM

Name: http://docs.info.apple.com/article.html?artnum=305391

Hyperlink:http://docs.info.apple.com/article.html?artnum=305391

External Source: CONFIRM

Name: http://docs.info.apple.com/article.html?artnum=305214

Hyperlink:http://docs.info.apple.com/article.html?artnum=305214

References to Check Content

Identifier:oval:org.mitre.oval:def:5252

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:5252

Identifier:oval:org.mitre.oval:def:6094

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:6094

Identifier:oval:org.mitre.oval:def:9295

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:9295

Identifier:oval:org.mitre.oval:def:5993

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:5993

Identifier:oval:org.mitre.oval:def:5978

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:5978