CVE-2005-1918

LowCVSS 2.6/10Last modified Jun 16, 2026

Description

The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/".

Metrics

CVSS 2.0 2.6/10AV:N/AC:H/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/18988Patch, Vendor Advisory
http://secunia.com/advisories/19130Vendor Advisory
http://secunia.com/advisories/19183Patch, Vendor Advisory
http://secunia.com/advisories/20397Vendor Advisory
http://securitytracker.com/id?1015655Patch
http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm
http://www.novell.com/linux/security/advisories/2006_05_sr.htmlVendor Advisory
http://www.redhat.com/support/errata/RHSA-2006-0195.htmlPatch, Vendor Advisory
http://www.securityfocus.com/archive/1/430297/100/0/threaded
http://www.securityfocus.com/bid/5834Patch
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9946
http://secunia.com/advisories/18988Patch, Vendor Advisory
http://secunia.com/advisories/19130Vendor Advisory
http://secunia.com/advisories/19183Patch, Vendor Advisory
http://secunia.com/advisories/20397Vendor Advisory
http://securitytracker.com/id?1015655Patch
http://support.avaya.com/elmodocs2/security/ASA-2006-110.htm
http://www.novell.com/linux/security/advisories/2006_05_sr.htmlVendor Advisory
http://www.redhat.com/support/errata/RHSA-2006-0195.htmlPatch, Vendor Advisory
http://www.securityfocus.com/archive/1/430297/100/0/threaded
http://www.securityfocus.com/bid/5834Patch
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140589
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9946

Timeline

Published: Dec 31, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-19207.5The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were CVE-2005-19217.5Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 CVE-2005-19225.0The MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service (file descriptor and CVE-2005-19232.6The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denia CVE-2005-19249.3The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands via shell metacharact CVE-2005-19257.5Multiple directory traversal vulnerabilities in Tikiwiki before 1.9.1 allow remote attackers to read arbitrary files and execute commands vi CVE-2005-19287.8Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running with Trend Micro Contro CVE-2005-19297.5Multiple heap-based buffer overflows in (1) isaNVWRequest.dll and (2) relay.dll in Trend Micro ServerProtect Management Console 5.58 and ear CVE-2005-19305.0Directory traversal vulnerability in the Crystal Report component (rptserver.asp) in Trend Micro ServerProtect Management Console 5.58, as u CVE-2005-19315.0GoodTech SMTP Server 5.14 allows remote attackers to cause a denial of service (application crash) via a RCPT TO command with an invalid arg CVE-2005-19322.1Lpanel 1.59 and earlier, and other versions before 1.597, allows remote authenticated users to modify certain critical variables and (1) mod CVE-2005-19337.5Dashboard in Apple Mac OS X Tiger 10.4 allows attackers to execute arbitrary commands by overriding the behavior of system widgets via a use