CVE-2007-4559

Name of the Vulnerable Software and Affected Versions: Python tarfile module versions (affected versions not specified)

Description: A directory traversal vulnerability in the extract and extractall functions of the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive. This issue is related to a problem of incorrect restriction of the path name to a directory with limited access, which can allow a remote attacker to execute arbitrary code. It is estimated that up to 350,000 open source projects may be potentially vulnerable to exploitation due to this security flaw.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.