CVE-2001-1267

Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot).

• ftp://alpha.gnu.org/gnu/tar/tar-1.13.25.tar.gz
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000538
• http://online.securityfocus.com/advisories/4514
• http://online.securityfocus.com/archive/1/196445Exploit, Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1
• http://www.iss.net/security_center/static/10224.phpVendor Advisory
• http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:066
• http://www.redhat.com/support/errata/RHSA-2002-096.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2002-138.html
• http://www.redhat.com/support/errata/RHSA-2003-218.html
• http://www.securityfocus.com/bid/3024
• ftp://alpha.gnu.org/gnu/tar/tar-1.13.25.tar.gz
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000538
• http://online.securityfocus.com/advisories/4514
• http://online.securityfocus.com/archive/1/196445Exploit, Patch, Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1
• http://www.iss.net/security_center/static/10224.phpVendor Advisory
• http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:066
• http://www.redhat.com/support/errata/RHSA-2002-096.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2002-138.html
• http://www.redhat.com/support/errata/RHSA-2003-218.html
• http://www.securityfocus.com/bid/3024

Published

Jul 12, 2001

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2001-1261Avaya Argent Office 2.1 may allow remote attackers to change…
• CVE-2001-1262Avaya Argent Office 2.1 compares a user-provided SNMP commun…
• CVE-2001-1263telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote…
• CVE-2001-1264Vulnerability in mkacct in HP-UX 11.04 running Virtualvault …
• CVE-2001-1265Directory traversal vulnerability in IBM alphaWorks Java TFT…
• CVE-2001-1266Directory traversal vulnerability in Doug Neal's HTTPD Daemo…
• CVE-2001-1268Directory traversal vulnerability in Info-ZIP UnZip 5.42 and…
• CVE-2001-1269Info-ZIP UnZip 5.42 and earlier allows attackers to overwrit…
• CVE-2001-1270Directory traversal vulnerability in the console version of …
• CVE-2001-1271Directory traversal vulnerability in rar 2.02 and earlier al…
• CVE-2001-1272wmtv 0.6.5 and earlier does not properly drop privileges, wh…
• CVE-2001-1273The "mxcsr P4" vulnerability in the Linux kernel before 2.2.…