CVE-2011-5325
udhcpc: Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to po...
CVE-2011-5325 is fixed in 6 products on 1 platform, first by busybox 1:1.27.2-2ubuntu3, released August 6, 2017. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0698
94th percentile
Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlink.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| busybox · Ubuntu 18.04.6 LTS (bionic) | 1:1.27.2-2ubuntu3 | busybox 1:1.27.2-2ubuntu3 | Aug 6, 2017 |
| busybox-initramfs · Ubuntu 18.04.6 LTS (bionic) | 1:1.27.2-2ubuntu3 | busybox-initramfs 1:1.27.2-2ubuntu3 | Aug 6, 2017 |
| busybox-static · Ubuntu 18.04.6 LTS (bionic) | 1:1.27.2-2ubuntu3 | busybox-static 1:1.27.2-2ubuntu3 | Aug 6, 2017 |
| busybox-syslogd · Ubuntu 18.04.6 LTS (bionic) | 1:1.27.2-2ubuntu3 | busybox-syslogd 1:1.27.2-2ubuntu3 | Aug 6, 2017 |
| udhcpc · Ubuntu 18.04.6 LTS (bionic) | 1:1.27.2-2ubuntu3 | udhcpc 1:1.27.2-2ubuntu3 | Aug 6, 2017 |
| udhcpd · Ubuntu 18.04.6 LTS (bionic) | 1:1.27.2-2ubuntu3 | udhcpd 1:1.27.2-2ubuntu3 | Aug 6, 2017 |