CVE-2007-4134: Red Hat Fedora

Medium severity, CVSS 6.8. EPSS: 3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.

Affected products

Published 2007-08-30. Last modified 2026-06-16.