HTTP: GNU Tar PAX Extended Headers Handling Buffer Overflow

This signature detects attempts to exploit a known vulnerability in GNU Tar archive utility. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

GNU Tar is prone to a buffer overflow when handling invalid headers. Successful exploitation could potentially lead to arbitrary code execution, but this has not been confirmed. Tar 1.14 through 1.15.90 are affected; other versions may also be vulnerable.

Affected Products

Avaya s8300,Openpkg openpkg

References

BugTraq: 16764

CVE: CVE-2006-0300

Short Name

HTTP:STC:DL:GNU-TAR-PAX-BOF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: GNU Tar PAX Extended Headers Handling Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?