CVE:CVE-2018-12015
CNNVD:CNNVD-201806-391
Perl是美国程序员拉里-沃尔（Larry Wall）所研发的一种免费且功能强大的跨平台编程语言。Archive::Tar module是其中的一个用于处理tar文件的模块。
Perl 5.26.2及之前版本中的Archive::Tar模块存在安全漏洞。攻击者可借助带有相同名称的符号链接和常规文件的归档文件利用该漏洞绕过目录遍历保护机制并覆盖任意文件。
solution:Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,17.10,18.04,and avoid the version 12.04,14.04,16.04,17.10,18.04; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade perl perl to a higher version than 5.26.2,and avoid the version (,5.26.2]; Upgrade archive  to a higher version than tar_project:archive,and avoid the version tar_project:archive; Upgrade apple mac_os_x to a higher version than 10.14.4,and avoid the version (,10.14.4); Upgrade netapp data_ontap_edge to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp snap_creator_framework to a higher version than -; Upgrade netapp snapdrive to a higher version than -