Detections
Analytics
CentOS 3 / 4 / 5 : star (CESA-2007:0873)
medium Nessus Plugin ID 25972
Synopsis
The remote CentOS host is missing a security update.Description
An updated star package that fixes a path traversal flaw is now available.This update has been rated as having moderate security impact by the Red Hat Security Response Team.
Star is a tar-like archiver. It saves multiple files into a single tape or disk archive, and can restore individual files from the archive. Star includes multi-volume support, automatic archive format detection and ACL support.
A path traversal flaw was discovered in the way star extracted archives. A malicious user could create a tar archive that would cause star to write to arbitrary files to which the user running star had write access. (CVE-2007-4134)
Red Hat would like to thank Robert Buchholz for reporting this issue.
As well, this update adds the command line argument '-..' to the Red Hat Enterprise Linux 3 version of star. This allows star to extract files containing '/../' in their pathname.
Users of star should upgrade to this updated package, which contain backported patches to correct these issues.
Solution
Update the affected star package.See Also
http://www.nessus.org/u?a266a5b7
http://www.nessus.org/u?e1aa6292
http://www.nessus.org/u?7b587b06
http://www.nessus.org/u?cfe36240
http://www.nessus.org/u?02e483ca
http://www.nessus.org/u?435b5817
Plugin Details
Severity: Medium
ID: 25972
File Name: centos_RHSA-2007-0873.nasl
Version: 1.19
Type: local
Agent: unix
Family: CentOS Local Security Checks
Published: 9/5/2007
Updated: 1/4/2021
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.8
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/o:centos:centos:3, cpe:/o:centos:centos:4, cpe:/o:centos:centos:5, p-cpe:/a:centos:centos:star
Required KB Items: Host/local_checks_enabled, Host/CentOS/release, Host/CentOS/rpm-list
Exploit Ease: No known exploits are available
Patch Publication Date: 9/4/2007
Vulnerability Publication Date: 8/30/2007
Reference Information
CVE: CVE-2007-4134
BID: 25417