« Volver al listado

CVE-2016-6321

Estado: ModificadaAlta (7.5)—

Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name parameter, aka POINTYFEATHER.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

GNU — TAR

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-6321",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2016-6321",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-08-06T20:54:23.851813Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2016-12-09T22:59:00.170",
  "references": [
    {
      "url": "http://git.savannah.gnu.org/cgit/tar.git/commit/?id=7340f67b9860ea0531c1450e5aa261c50f67165d",
      "tags": [
        "Issue Tracking",
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://lists.gnu.org/archive/html/bug-tar/2016-10/msg00016.html",
      "tags": [
        "Mailing List",
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://packetstormsecurity.com/files/139370/GNU-tar-1.29-Extract-Pathname-Bypass.html",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2016/Oct/102",
      "tags": [
        "Mailing List",
        "Patch",
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2016/Oct/96",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.debian.org/security/2016/dsa-3702",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/93937",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.ubuntu.com/usn/USN-3132-1",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://security.gentoo.org/glsa/201611-19",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://sintonen.fi/advisories/tar-extract-pathname-bypass.proper.txt",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://git.savannah.gnu.org/cgit/tar.git/commit/?id=7340f67b9860ea0531c1450e5aa261c50f67165d",
      "tags": [
        "Issue Tracking",
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.gnu.org/archive/html/bug-tar/2016-10/msg00016.html",
      "tags": [
        "Mailing List",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://packetstormsecurity.com/files/139370/GNU-tar-1.29-Extract-Pathname-Bypass.html",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2016/Oct/102",
      "tags": [
        "Mailing List",
        "Patch",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2016/Oct/96",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2016/dsa-3702",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/93937",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ubuntu.com/usn/USN-3132-1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://security.gentoo.org/glsa/201611-19",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://sintonen.fi/advisories/tar-extract-pathname-bypass.proper.txt",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    },
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name parameter, aka POINTYFEATHER."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de salto de directorio en la función safer_name_suffix en GNU tar 1.14 hasta la versión 1.29 podrían permitir a atacantes remotos eludir un mecanismo de protección previsto y escribir en archivos arbitarios a través de vectores relacionados con una desinfección inadecuada del parámetro file_name, también conocida como POINTYFEATHER."
    }
  ],
  "lastModified": "2026-06-17T00:50:49.503",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B87C1F89-63A8-4955-9C42-3B49EC1C1C78"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7FE339D0-D585-440D-8BD4-5183833258F4"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.15.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B8B4A20D-AAD0-4857-AC0F-D221EBB08BFD"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.15.90:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C9B46F22-B0FB-4F99-B44E-D34E0DD5D194"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.15.91:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D8F228C-6DED-42A2-BE9B-944171EAC10C"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B6D83BA-6C85-43F3-87FD-A77CC6F1D21A"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.16.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "205C3978-7317-48BB-ADC6-C226CCA2D379"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7BF78BD-B860-47A4-90E9-D6CD7A6FC5AE"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.18:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "18BBBFFE-5A92-48C6-9DFB-7EC410FA0742"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.19:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A0619D33-E655-49E7-9D6A-5A447D71D0CD"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5940AA70-909E-4322-8441-ED5F87086348"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DC10F9D6-03C2-4B0D-B50A-A016A8E1AFA8"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.22:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F23B73EA-D661-400E-AC9D-0264899C888E"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.23:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD42475A-D399-4C39-B6E6-D22117B3F670"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.24:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E4951455-E524-4EE6-8F15-FF032283F253"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.25:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C9E44CF9-2819-4E9B-908A-37032DFD86EE"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.26:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9E3A4256-D318-4517-83A7-1DA8505AF9C9"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.27:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "706A2A77-2FB3-4B85-A43B-37B04AFF8895"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.27.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "26CB6029-7DC9-4009-8837-A0B49FC6C378"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.28:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08D644F4-4D2A-4940-9E70-52DF635B7CF8"
            },
            {
              "criteria": "cpe:2.3:a:gnu:tar:1.29:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C8A547F3-7D6F-480B-AF32-08AB5FB98FAF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}