exploit/multi/fileformat/archive_tar_arb_file_write

weaponized

PEAR Archive_Tar 1.4.10 Arbitrary File Write

view exploit source metasploittype exploitpublished 2020-11-17catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-28949US	high7.8OT critical	84.6% (100th)	KEV	2020-11-19
Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succe…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.