[SMGLSA-2006-19] tar: Buffer overflow via unspecified vectors involving PAX extended headers

Summary
============

Buffer overflow in tar 1.14 through 1.15.90 allows user-complicit
attackers to cause a denial of service (application crash) and possibly
execute code via unspecified vectors involving PAX extended headers.

Impact
=================
Allows user-complicit attackers to cause a denial of service
(application crash) and possibly execute code via unspecified vectors
involving PAX extended headers.

Solution:
=========
Update tar as soon as possible.

Resolution
==========
All tar users should upgrade to the latest available version:
        # scribe update
        # cast -c tar

References
============
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0300

signature.asc
Description: PGP signature