Unscored DLA-564-1 2 CVEs

tardiff - security update

Published Jul 28, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	tardiff	0.1-1+deb7u1

Vulnerabilities 2

Unscored —

CVE-2015-0857

Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a (…

tardiff tardiff Debian Ubuntu

May 6, 2016
Unscored —

CVE-2015-0858

Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardi…

tardiff tardiff Debian Ubuntu

May 6, 2016