CVE:CVE-2011-5325
CNNVD:CNNVD-201708-291
BusyBox是由软件开发者Denys Viasenko开发维护的一个UNIX程序实用包。BusyBox implementation of tar是其中的一个tar（文件备份）命令的实现。
BusyBox implementation of tar 1.22.0 v5之前的版本中存在目录遍历漏洞。远程攻击者可通过符号链接攻击利用该漏洞读取任意文件。
solution:Upgrade busybox busybox to a higher version than 1.21.1,and avoid the version (,1.21.1]; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10