CVE-2011-5325

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlink.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published: Aug 7, 2017
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-53267.5imlib2 before 1.4.9 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) by drawing a 2x1 ellip CVE-2011-53279.8In the Linux kernel before 3.1, an off by one in the drivers/target/loopback/tcm_loop.c tcm_loop_make_naa_tpg() function could result in at CVE-2011-53288.8The user-access-manager plugin before 1.2 for WordPress has CSRF.CVE-2011-53296.1The redirection plugin before 2.2.9 for WordPress has XSS in the admin menu, a different issue than CVE-2011-4562.CVE-2011-53309.8Distributed Ruby (aka DRuby) 1.8 mishandles the sending of syscalls.CVE-2011-53319.8Distributed Ruby (aka DRuby) 1.8 mishandles instance_eval.