CVE:CVE-2007-4829
CNNVD:CNNVD-200711-029
Archive::Tar是Perl中用于操控tar文档的模块。
Archive::Tar模块在解压tar文档时存在输入验证错误，如果所解压到文档中包含有目录遍历序列的话，就可以将文件解压到指定目录以外的任意位置。
solution:Upgrade archive  to a higher version than tar_project:archive,and avoid the version tar_project:archive; Upgrade canonical ubuntu_linux to a higher version than 6.06,7.10,8.04,8.10,and avoid the version 6.06,7.10,8.04,8.10