CVE-2007-4829: Archive::tar Project Archive::tar

Medium severity, CVSS 6.8. EPSS: 4.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences.

Affected products

• Archive::tar Project Archive::tar: up to and including 1.36
• Canonical Ubuntu Linux: version 6.06 only; version 7.10 only; version 8.04 only; version 8.10 only

Published 2007-11-02. Last modified 2026-06-16.