CVE-2007-4559

Advisory lineage Upstream: 0 Downstream: 32
Modified
Published: 28 Aug 2007, 00:00
Last modified:17 Jan 2025, 14:48

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.8 CRITICAL
v3.1 (cve.org)
EPSS Score
89.36% CRITICAL
89% probability -1.22%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

28 Aug 2007, 00:00
Published
Vulnerability first disclosed
17 Jan 2025, 14:48
Last Modified
Vulnerability information updated

Description

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.

CVSS Metrics

  • v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • v2.0•MEDIUM•Score: 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 89.36%• Percentile: 100%

Techniques & Countermeasures

  • CWE-22•Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

    The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Affected Systems

  • python•python

    < 3.6.16 | ≥ 3.7.0, < 3.8.17 | ≥ 3.9.0, < 3.9.17 | ≥ 3.10.0, < 3.10.12 | ≥ 3.11.0, < 3.11.4

References (12)