CVE-2007-4559
Python tarfile Directory Traversal Vulnerability
Description
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.
INFO
Published Date :
Aug. 28, 2007, 1:17 a.m.
Last Modified :
June 16, 2026, 10:44 p.m.
Remotely Exploit :
Yes !
Source :
[email protected]
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 2.0 | MEDIUM | [email protected] | ||||
| CVSS 3.1 | CRITICAL | 134c704f-9b21-4f2e-91b3-4a467353bcc0 |
Solution
- Update Python to the latest version.
- Install security patches for Python.
- Upgrade Python packages to patched versions.
Public PoC/Exploit Available at Github
CVE-2007-4559 has a 29 public
PoC/Exploit available at Github.
Go to the Public Exploits tab to see the list.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2007-4559.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2007-4559 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2007-4559
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
tar archive reader/writer in pure Mojo — ustar/GNU/pax, GNU-tar byte-identical. Mirrors Python's tarfile.
archive mojo mojolang pure-mojo python-interop tar tarfile
Mojo
Wazuh SIEM home lab detecting real malware, CVEs, and 481+ security events mapped to MITRE ATT&CK across NIST 800-53, PCI DSS, and HIPAA compliance frameworks
None
PowerShell Python
Interactive CLI for Illumina BCL-convert demultiplexing on HPC
Shell JavaScript
None
Python JavaScript CSS Shell Batchfile
None
Python JavaScript CSS Shell Batchfile
Paste git URL, auto-detect install method, auto-install, done!
Dockerfile Ruby Makefile JavaScript Shell Python
A professional-grade Python tool for converting between archive, disk image, and forensic file formats.
Python
None
Python Shell Dockerfile HTML CSS JavaScript
Post-quantum file encryption and signing from the command line
age age-encryption cli-tool digital-signatures encryption file-encryption hybrid-encryption key-management ml-dsa ml-kem nist-fips-203 nist-fips-204 openssl post-quantum post-quantum-cryptography pqc python3 security encrypt-then-sign microsd-keys
Python
Automated solver for OverTheWire Bandit wargame (levels 0–15). Hardened SSH automation via paramiko: password redaction in logs, Tar-Slip protection, MITM-resistant host-key pinning, multi-strategy SSH key auth, TLS submission. All tunables via environment variables. Educational use only.
Python
None
Dockerfile Python Shell
NSX-DFW
Python Batchfile
CVE-2025-4138 / CVE-2025-4517 — Python tarfile PATH_MAX Symlink Filter Bypass
escalate-privilages symlink tarfile cve-2025-4138 cve-20254517 python-tarfile
Python
CCMD (Custom Command Manager) is a cross-platform command interpreter that lets you define natural shortcuts for everyday shell actions. Works on Linux, macOS, and Windows (PowerShell/WSL). Includes built-in helpers for navigation, git automation, system stats, SSH, and more. Safe by design
Python PowerShell Shell
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2007-4559 vulnerability anywhere in the article.
-
tripwire.com
VERT Threat Alert: February 2025 Patch Tuesday Analysis
Today’s VERT Alert addresses Microsoft’s February 2025 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-1143 as soon as coverage is completed.I ... Read more
-
tripwire.com
VERT Threat Alert: August 2024 Patch Tuesday Analysis
Today’s VERT Alert addresses Microsoft’s August 2024 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-1119 as soon as coverage is completed.CVE ... Read more
The following table lists the changes that have been made to the
CVE-2007-4559 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jun. 16, 2026
Action Type Old Value New Value Added SSVC {'id': 'CVE-2007-4559', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'poc'}, {'automatable': 'yes'}, {'technicalImpact': 'total'}], 'version': '2.0.3', 'timestamp': '2025-01-17T14:48:13.204984Z'} -
CVE Modified by [email protected]
Jun. 16, 2026
Action Type Old Value New Value Added Affected [{'vendor': 'n/a', 'product': 'n/a', 'versions': [{'status': 'affected', 'version': 'n/a'}]}] -
Status Change by [email protected]
Apr. 23, 2026
Action Type Old Value New Value -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jan. 17, 2025
Action Type Old Value New Value Added CVSS V3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Added CWE CWE-22 -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 21, 2024
Action Type Old Value New Value Added Reference http://mail.python.org/pipermail/python-dev/2007-August/074290.html Added Reference http://mail.python.org/pipermail/python-dev/2007-August/074292.html Added Reference http://secunia.com/advisories/26623 Added Reference http://www.vupen.com/english/advisories/2007/3022 Added Reference https://bugzilla.redhat.com/show_bug.cgi?id=263261 Added Reference https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVBB7NU3YIRRDOKLYVN647WPRR3IAKR6/ Added Reference https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FI55PGL47ES3OU2FQPGEHOI2EK3S2OBH/ Added Reference https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KA4Z44ZAI4SY7THCFBUDNT5EEFO4XQ3A/ Added Reference https://lists.fedoraproject.org/archives/list/[email protected]/message/CVBB7NU3YIRRDOKLYVN647WPRR3IAKR6/ Added Reference https://lists.fedoraproject.org/archives/list/[email protected]/message/FI55PGL47ES3OU2FQPGEHOI2EK3S2OBH/ Added Reference https://lists.fedoraproject.org/archives/list/[email protected]/message/KA4Z44ZAI4SY7THCFBUDNT5EEFO4XQ3A/ Added Reference https://security.gentoo.org/glsa/202309-06 -
CVE Modified by [email protected]
May. 14, 2024
Action Type Old Value New Value -
CVE Modified by [email protected]
Mar. 23, 2024
Action Type Old Value New Value Added Reference MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KA4Z44ZAI4SY7THCFBUDNT5EEFO4XQ3A/ [No types assigned] -
CVE Modified by [email protected]
Mar. 16, 2024
Action Type Old Value New Value Added Reference MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVBB7NU3YIRRDOKLYVN647WPRR3IAKR6/ [No types assigned] -
CVE Modified by [email protected]
Mar. 16, 2024
Action Type Old Value New Value Added Reference MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FI55PGL47ES3OU2FQPGEHOI2EK3S2OBH/ [No types assigned] -
CVE Modified by [email protected]
Sep. 17, 2023
Action Type Old Value New Value Added Reference https://security.gentoo.org/glsa/202309-06 [No Types Assigned] -
Modified Analysis by [email protected]
Aug. 02, 2023
Action Type Old Value New Value Changed Reference Type http://mail.python.org/pipermail/python-dev/2007-August/074290.html No Types Assigned http://mail.python.org/pipermail/python-dev/2007-August/074290.html Mailing List, Vendor Advisory Changed Reference Type http://mail.python.org/pipermail/python-dev/2007-August/074292.html Exploit http://mail.python.org/pipermail/python-dev/2007-August/074292.html Exploit, Mailing List Changed Reference Type http://secunia.com/advisories/26623 No Types Assigned http://secunia.com/advisories/26623 Broken Link Changed Reference Type http://www.vupen.com/english/advisories/2007/3022 No Types Assigned http://www.vupen.com/english/advisories/2007/3022 Broken Link Changed Reference Type https://bugzilla.redhat.com/show_bug.cgi?id=263261 No Types Assigned https://bugzilla.redhat.com/show_bug.cgi?id=263261 Issue Tracking Changed CPE Configuration OR *cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:* OR *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions up to (excluding) 3.6.16 *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions from (including) 3.7.0 up to (excluding) 3.8.17 *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions from (including) 3.9.0 up to (excluding) 3.9.17 *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions from (including) 3.10.0 up to (excluding) 3.10.12 *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions from (including) 3.11.0 up to (excluding) 3.11.4 -
Initial Analysis by [email protected]
Aug. 28, 2007
Action Type Old Value New Value