Is CVE-2011-5325 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 7%.

What products does CVE-2011-5325 affect?

Tracked products affected include Ubuntu. Check the version you run to see whether it is affected.

How do I fix CVE-2011-5325?

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

CVE-2011-5325

Q: What is CVE-2011-5325?

CVE-2011-5325 is a high-severity software vulnerability (Path traversal) with a CVSS score of 7.5. Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlink.

HIGH severity · CVSS 7.5 · Path traversal

7.5CVSS HIGH

Summary

Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlink.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

Confidentiality impactNone

Integrity impactHigh

Availability impactNone

Exploit probability (EPSS)7%

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products we track (1)

Ubuntu

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

NVD record
http://www.openwall.com/lists/oss-security/2015/10/21/7Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1274215Advisory
https://lists.debian.org/debian-lts-announce/2018/07/msg00037.htmlAdvisory
https://lists.debian.org/debian-lts-announce/2021/02/msg00020.htmlAdvisory
http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.htmlAdvisory
http://seclists.org/fulldisclosure/2019/Jun/18Advisory
http://seclists.org/fulldisclosure/2020/Aug/20Advisory
https://seclists.org/bugtraq/2019/Jun/14Advisory