CVE 2007-4476

Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."

Related bugs and status

CVE-2007-4476 (Candidate) is related to these bugs:

Bug #161173: [CVE-2007-4476] cpio is affected by this CVE as tar.

		In	Importance	Status
161173	[CVE-2007-4476] cpio is affected by this CVE as tar.	cpio (Ubuntu)	Undecided	Fix Released
161173	[CVE-2007-4476] cpio is affected by this CVE as tar.	cpio (Ubuntu Dapper)	Undecided	Fix Released
161173	[CVE-2007-4476] cpio is affected by this CVE as tar.	cpio (Ubuntu Edgy)	Undecided	Invalid
161173	[CVE-2007-4476] cpio is affected by this CVE as tar.	cpio (Ubuntu Gutsy)	Undecided	Fix Released
161173	[CVE-2007-4476] cpio is affected by this CVE as tar.	cpio (Ubuntu Feisty)	Undecided	Fix Released
161173	[CVE-2007-4476] cpio is affected by this CVE as tar.	Fedora	Low	Fix Released

Bug #163831: [cpio] buffer overflow vulnerability

Summary				In	Importance	Status
	163831	[cpio] buffer overflow vulnerability		cpio (Ubuntu)	Undecided	New

Bug #180299: [tar] [CVE-2007-4476] Buffer overflow

		In	Importance	Status
180299	[tar] [CVE-2007-4476] Buffer overflow	tar (Ubuntu)	Low	Fix Released
180299	[tar] [CVE-2007-4476] Buffer overflow	tar (Gentoo Linux)	High	Fix Released
180299	[tar] [CVE-2007-4476] Buffer overflow	tar (Debian)	Unknown	Fix Released
180299	[tar] [CVE-2007-4476] Buffer overflow	Fedora	Low	Fix Released
180299	[tar] [CVE-2007-4476] Buffer overflow	tar (Ubuntu Dapper)	Undecided	Fix Released
180299	[tar] [CVE-2007-4476] Buffer overflow	tar (Ubuntu Gutsy)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.