Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

USN-709-1: tar vulnerability

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-709-1: tar vulnerability
# 1  
Old 01-15-2009
USN-709-1: tar vulnerability
Referenced CVEs:
CVE-2007-4476


Description:
=========================================================== Ubuntu Security Notice USN-709-1 January 15, 2009 tar vulnerability CVE-2007-4476 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 7.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: tar 1.15.1-2ubuntu2.3 Ubuntu 7.10: tar 1.18-2ubuntu1.1 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: Dmitry V. Levin discovered a buffer overflow in tar. If a user or automatated system were tricked into opening a specially crafted tar file, an attacker could crash tar or possibly execute arbitrary code with the privileges of the user invoking the program.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT SUSE

virt-tar-out

virt-tar-out(1) 					      Virtualization Support						   virt-tar-out(1)

NAME

       virt-tar-out - Pack a virtual machine disk image directory into a tarball.

SYNOPSIS

	virt-tar-out -a disk.img /dir files.tar

	virt-tar-out -d domain /dir files.tar

	virt-tar-out -d domain /dir - | gzip --best > files.tar.gz

DESCRIPTION

       "virt-tar-out" packs a virtual machine disk image directory into a tarball.

       The first parameter is the absolute path of the virtual machine directory.  The second parameter is the tar file to write.  Use "-" to
       write to standard output.

EXAMPLES

       Download the home directories from a guest:

	virt-tar-out -d MyGuest /home - | gzip --best > homes.tar.gz

JUST A SHELL SCRIPT WRAPPER AROUND GUESTFISH

       This command is just a simple shell script wrapper around the guestfish(1) "tar-out" command.  For anything more complex than a trivial
       copy, you are probably better off using guestfish directly.

OPTIONS

       Since the shell script just passes options straight to guestfish, read guestfish(1) to see the full list of options.

SEE ALSO

       guestfish(1), virt-cat(1), virt-copy-in(1), virt-copy-out(1), virt-edit(1), virt-tar-in(1), <http://libguestfs.org/>.

AUTHORS

       Richard W.M. Jones ("rjones at redhat dot com")

COPYRIGHT

       Copyright (C) 2011 Red Hat Inc.	<http://libguestfs.org/>

       This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by
       the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

       This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of
       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more details.

       You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation,
       Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.

libguestfs-1.18.1						    2013-12-07							   virt-tar-out(1)