Description
Cool Projects TarDiff allows remote attackers to execute arbitrary commands
via shell metacharacters in the name of a (1) tar file or (2) file within a
tar file.
Notes
| mdeslaur | not completely handled in 0.1-3 |
Package
| Upstream: | released
(0.1-5)
|
| Ubuntu 18.04 LTS: | not-affected
(0.1-5)
|
| Ubuntu 14.04 ESM: | DNE
(trusty was released [0.1-2+deb8u2build0.14.04.1])
|
| Ubuntu 20.04 FIPS Compliant: | not-affected
(0.1-5)
|
Patches:
Updated: 2022-04-13 12:04:19 UTC (commit f411bd370d482ef4385c4e751d121a4055fbc009)