PEAR Archive_Tar Arbitrary File Write
Posted by deepcore on January 26, 2021 – 8:30 am
This Metasploit module takes advantages of Archive_Tar versions prior to 1.4.11 which fail to validate file stream wrappers contained within filenames to write an arbitrary file containing user controlled content to an arbitrary file on disk. Note that the file will be written to disk with the permissions of the user that PHP is running as, so it may not be possible to overwrite some files if the PHP user is not appropriately privileged.
Post a reply
You must be logged in to post a comment.