This script is Copyright (C) 2008-2014 Tenable Network Security, Inc.
The remote Gentoo host is missing one or more security-related
The remote host is affected by the vulnerability described in GLSA-200812-10
(Archive::Tar: Directory traversal vulnerability)
Jonathan Smith of rPath reported that Archive::Tar does not check for
'..' in file names.
A remote attacker could entice a user or automated system to extract a
specially crafted tar archive, overwriting files at arbitrary locations
outside of the specified directory.
There is no known workaround at this time.
See also :
All Archive::Tar users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=perl-core/Archive-Tar-1.40'
Risk factor :
Medium / CVSS Base Score : 6.8
Family: Gentoo Local Security Checks
Nessus Plugin ID: 35085 (gentoo_GLSA-200812-10.nasl)
CVE ID: CVE-2007-4829