CVE-2001-1267: GNU Tar

Low severity, CVSS 2.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot).

Affected products

• GNU Tar: up to and including 1.13.19

Published 2001-07-12. Last modified 2026-06-16.