OSVDB ID: 38184 Title: MailMarshal tar Archive Traversal Arbitrary File Overwrite |
Info |
|
|
Dates |
||||
|
|
Description |
MailMarshal contains a flaw that may allow a remote context-dependant attacker to overwrite arbitrary files on the target system. The issue is due to the server not properly handling TAR archives. With a specially crafted archive, an attacker may be able to trick a user into extracting the files and overwriting arbitrary files on the system. This could be used to install malicious software on the system. |
Classification |
Attack Type:
Input Manipulation
|
Solution |
Products |
Unknown or Incomplete |
References |
|
Credit |
Unknown or Incomplete |