Bug#775218: ppmd: directory traversal vulnerability

2015-01-12 Thread Alexander Cherepanov
peed: 1 KB/sec $ ls ../rel ../rel -- Alexander Cherepanov -- To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/54b40248.60...@mccme.ru

Bug#774716: paxtar: directory traversal vulnerabilities

2015-01-06 Thread Alexander Cherepanov
For example, let's create a sample archive: ln -s /tmp dir paxtar cvf test.tar dir rm dir mkdir dir echo hello > dir/file paxtar rvf test.tar dir/file rm -r dir and then test it: paxtar xvf test.tar This will create a symlink "dir" in the current directory and