CVE-2006-0931: PEAR Archive Tar

Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in PEAR::Archive_Tar 1.2, and other versions before 1.3.2, allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a TAR archive.

Affected products

• PEAR PEAR Archive Tar: up to and including 1.2; up to and including 1.3.0; up to and including 1.3.1

Published 2006-02-28. Last modified 2026-06-16.