Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby
    allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry.
    (CVE-2016-10173)

The remote host is affected by the vulnerability described in GLSA-201702-32 (Ruby Archive::Tar::Minitar: Directory traversal)

    Michal Marek discovered that Ruby Archive::Tar::Minitar is vulnerable to       a directory traversal vulnerability.
  Impact :

    A remote attacker could entice a user or an automated system to process       a specially crafted archive using Ruby Archive::Tar::Minitar possibly       allowing the writing of arbitrary files with the privileges of the       process.
  Workaround :

    There is no known workaround at this time.

This update for rubygem-minitar fixes the following issues :

  - CVE-2016-10173: Fixed a directory traversal     vulnerability in rubygem-minitar,     rubygem-archive-tar-minitar. (boo#1021740)

Michal Marek discovered that ruby-archive-tar-minitar, a Ruby library that provides the ability to deal with POSIX tar archive files, is prone to a directory traversal vulnerability. An attacker can take advantage of this flaw to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename.

It has been found that rubygem archive-tar-minitar allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename.

For Debian 7 'Wheezy', these problems have been fixed in version 0.5.2-2+deb7u1.

We recommend that you upgrade your ruby-archive-tar-minitar packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
422369	SCA: security update for archive-tar-minitar, minitar (GHSA-h5g2-38x9-4gv3)	Tenable Cloud Security	SCA Checks	high
422369	SCA: security update for archive-tar-minitar, minitar (GHSA-h5g2-38x9-4gv3)	Tenable Self-Hosted Container Security	SCA Checks	high
97344	GLSA-201702-32 : Ruby Archive::Tar::Minitar: Directory traversal	Nessus	Gentoo Local Security Checks	high
97094	openSUSE Security Update : rubygem-minitar (openSUSE-2017-231)	Nessus	SuSE Local Security Checks	high
96913	Debian DSA-3778-1 : ruby-archive-tar-minitar - security update	Nessus	Debian Local Security Checks	high
96883	Debian DLA-808-1 : ruby-archive-tar-minitar security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2016-10173

high

Tenable Plugins

high

high

high

high

high

high