Re: GNU tar directory traversal

[virus () nolog org]

Hello,

virus () nolog org wrote:
> no. Not agreed. -C is for changing the directory *before processing the 
> remaining arguments*. So, if you don't want tar to overwrite files, you 
> have to use -w.

Siim was right, -w is a workaround. Therefore it is - in opposite to my 
former opinion - a security issue.

Sorry for the noise.

GTi

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/