CoreCVE
Back

CRITICAL

python: tarfile module directory traversal

Published Aug 28, 2007

Description

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.

Affected products

Remediation

Red Hat statement

The Red Hat Product Security has rated this issue as having a Moderate security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification. Versions of `python36:3.6/python36` as shipped with Red Hat Enterprise Linux 8 are marked as 'Not affected' as they just provide "symlinks" to the main `python3` component, which provides the actual interpreter of the Python programming language.

Red Hat mitigation

Do not extract archives from untrusted sources with the Python tarfile module. Users of the module should add sanity checks when calling the tarfile.extract or tarfile.extractall functions.

Metrics

Weaknesses (1)

CWE-22

Path Traversal

References (15)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Aug 28, 2007
Updated Jan 17, 2025
Reserved Aug 27, 2007
Link CVE-2007-4559
CISA Vulnrichment
Updated Jan 17, 2025
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2007-4559
Red Hat
Severity Moderate
Public date Aug 24, 2007
Links CVE-2007-4559 - Bugzilla