Test ID:	1.3.6.1.4.1.25623.1.0.842955
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-3132-1)
Summary:	The remote host is missing an update for the 'tar' package(s) announced via the USN-3132-1 advisory.
Description:	Summary: The remote host is missing an update for the 'tar' package(s) announced via the USN-3132-1 advisory. Vulnerability Insight: Harry Sintonen discovered that tar incorrectly handled extracting files when path names are specified on the command line. If a user or automated system were tricked into processing a specially crafted archive, an attacker could possibly overwrite arbitrary files. Affected Software/OS: 'tar' package(s) on Ubuntu 12.04, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 16.10. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6321 20161026 [CSS] POINTYFEATHER / tar extract pathname bypass (CVE-2016-6321) http://seclists.org/fulldisclosure/2016/Oct/96 20161030 [CSS] POINTYFEATHER / tar extract pathname bypass (CVE-2016-6321) - patch update http://seclists.org/fulldisclosure/2016/Oct/102 93937 http://www.securityfocus.com/bid/93937 DSA-3702 http://www.debian.org/security/2016/dsa-3702 GLSA-201611-19 https://security.gentoo.org/glsa/201611-19 USN-3132-1 http://www.ubuntu.com/usn/USN-3132-1 [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E [bug-tar] 20161029 Re: [Bug-tar] possible fixes for CVE-2016-6321 http://lists.gnu.org/archive/html/bug-tar/2016-10/msg00016.html http://git.savannah.gnu.org/cgit/tar.git/commit/?id=7340f67b9860ea0531c1450e5aa261c50f67165d http://packetstormsecurity.com/files/139370/GNU-tar-1.29-Extract-Pathname-Bypass.html https://sintonen.fi/advisories/tar-extract-pathname-bypass.proper.txt
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.