CVE-2002-1216: GNU Tar

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary files via a symlink attack, as the result of a modification that effectively disabled the security check.

Affected products

• GNU Tar: up to and including 1.13.25; version 1.13.19 only

Published 2002-10-28. Last modified 2026-06-16.