Re: GNU Tar vulnerability

On Tuesday 28 November 2006 11:17, Sergey Matveychuk wrote:
> Please, note: http://secunia.com/advisories/23115/
>
> A port maintainer CC'ed.

This is one of those things where the impact is hard to determine 
because the link doesn't really give much info.  Ok, you can 
overwrite arbitrary files.....ANY file?  Or just files that the user 
running gtar has write access to?  If it's the first case then that's 
huge.  If it's the second case then who really cares.

-- 
Thanks,

Josh Paetzel
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"