#VU105975 External Control of File Name or Path in archiver - CVE-2024-0406
Published: March 24, 2025 / Updated: April 11, 2025
Vulnerability identifier: #VU105975
Vulnerability risk: High
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/U:Amber
CVE-ID: CVE-2024-0406
CWE-ID: CWE-73
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerable software:
archiver
archiver
Software vendor:
mholt (Matt Holt)
mholt (Matt Holt)
Description
The vulnerability allows a remote attacker to overwrite arbitrary files on the system.
The vulnerability exists due to application allows an attacker to control path of the files when extracting data from a .tar archive. A remote attacker can pass specially crafted archive to the application and overwrite arbitrary files on the system.
Remediation
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.