CVEs-PoC/2018/CVE-2018-12015.md

CVE-2018-12015

Description

In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file with the same name.

POC

Reference

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900834
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900834
• https://www.oracle.com/security-alerts/cpujul2020.html
• https://www.oracle.com/security-alerts/cpujul2020.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/InesMartins31/iot-cves
• https://github.com/lnick2023/nicenice
• https://github.com/qazbnm456/awesome-cve-poc
• https://github.com/xbl3/awesome-cve-poc_qazbnm456