Main
Vulnerability Database
Exploits
ID:11299 - Exploit for External Control of File Name or Path in archiver - CVE-2024-0406
ID:11299 - Exploit for External Control of File Name or Path in archiver - CVE-2024-0406
Published: April 11, 2025
Vulnerability identifier: #VU105975
Vulnerability risk: High
CVE-ID: CVE-2024-0406
CWE-ID: CWE-73
Exploitation vector: Remote access
Vulnerable software:
archiver
archiver
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to overwrite arbitrary files on the system.
The vulnerability exists due to application allows an attacker to control path of the files when extracting data from a .tar archive. A remote attacker can pass specially crafted archive to the application and overwrite arbitrary files on the system.
Remediation
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.