HTTP: Perl Archive Tar and ZIP Arbitrary File Overwrite
This signature detects an attempt to exploit an arbitrary file overwrite vulnerability which has been reported in the Perl Archive::Tar and Archive::Zip module. Successful exploitation could result in arbitrary file overwrite in the target user's system.
Extended Description
In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file with the same name.
Affected Products
Netapp snapdrive
Short Name
HTTP:PERL-TAR-ZIP-FO
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
Arbitrary Archive CVE-2018-10860 CVE-2018-12015 File Overwrite Perl Tar ZIP and bid:104423
Release Date
10/18/2018
Supported Platforms
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vsrx-19.2
srx-19.3
srx-branch-12.3
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx-12.3
vmx-19.3
srx-12.3
Sigpack Version
3730
False Positive
Unknown
Vendors
Apple
Perl
Archive
Netapp
Debian
Canonical
CVSS Score
6.4