CVE:CVE-2020-36193
CNNVD:CNNVD-202101-1311
Pear Archive_Tar是Pear（PEAR）团队的一个基于Php的可以对tar包进行创建、提取等操作的软件。
Archive_Tar  through 1.4.11 存在后置链接漏洞，该漏洞允许通过目录遍历进行写操作。
solution:Upgrade php archive_tar to a higher version than 1.4.11,and avoid the version (,1.4.11]; Upgrade fedoraproject fedora to a higher version than 32,33,34,35,and avoid the version 32,33,34,35; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade drupal drupal to a higher version than 7.78,8.9.13,9.0.11,9.1.3,and avoid the version [7.0,7.78),[8.9.0,8.9.13),[9.0.0,9.0.11),[9.1.0,9.1.3)