CVE-2007-4559 Details
Description
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.
A directory traversal vulnerability has been identified in the tarfile module of Python, specifically in the extract and extractall functions. This vulnerability allows user-assisted remote attackers to overwrite arbitrary files by exploiting the absence of proper path validation. The issue arises when filenames in a TAR archive include a .. (dot dot) sequence, enabling the manipulation of file paths to overwrite critical system files, such as /etc/passwd. This vulnerability is related to a previously known issue in the tar utility itself, referenced as CVE-2001-1267.
Users can upgrade to Python versions that have addressed this vulnerability. For Red Hat Enterprise Linux 9, this vulnerability has been fixed in the python3.6 package version 3.6.15-27.fc39. Fedora 38 and 40 also include this fix.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jan 17, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| python python | < 3.6.16 >= 3.7.0, < 3.8.17 >= 3.9.0, < 3.9.17 >= 3.10.0, < 3.10.12 >= 3.11.0, < 3.11.4 |
CPE
Remediation
| |
Change History
12 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 16, 2026 | CVE Modified | CISA-ADP |
| Jun 16, 2026 | CVE Modified | [email protected] |
| Apr 23, 2026 | Status Change | [email protected] |
| Jan 17, 2025 | CVE Modified | CISA-ADP |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Mar 23, 2024 | CVE Modified | [email protected] |
| Mar 16, 2024 | CVE Modified | [email protected] |
| Mar 16, 2024 | CVE Modified | [email protected] |
| Sep 17, 2023 | CVE Modified | [email protected] |
| Aug 2, 2023 | Modified Analysis | [email protected] |
| Aug 28, 2007 | Initial Analysis | [email protected] |