CVE DatabaseCVE-2011-5325

Updated 2026-06-16한국어 권고문 →

CVE-2011-53257.5/HIGHCWE-22

CVE-2011-5325 Official NVD Security Advisory (CVSS 7.5)

⚡ Jump to Patch

Affected Vendors

security-advisory

Affected Components

software

Published Date

2017-08-07

CVSS v3.1

7.5

HIGH

EPSS (30d)

7.0%

FIRST.org

CISA KEV

Not Listed

NVD Source ↗

Executive & SecOps Summary

SECOPS ASSESSMENT

Scope

Impacted configurations listed under CVE-2011-5325

Overview

Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside th...

Mitigation

Review official patches and verify network isolation controls.

Affected Products & Version Scope

Refer to official NVD CPE configuration entries

Remediation & Live Workaround Commands

PATCH & WORKAROUND

Apply the latest security updates provided by the official software maintainers.

Interactive SecOps Remediation Checklist

0/4 (0%)

Recommended Security Control & Mitigation Partner

Cloudflare Enterprise & Pro WAF

Audit runtime exposure and verify patching status via automated scanning.

Block Exploits Instantly with Managed Virtual Patching Rules

Can't patch production immediately? Deploy managed WAF rules at the edge to intercept RCE, SQLi, and deserialization payloads before they hit your origin server.

3-min setup · Automated Zero-Day Managed Rules

Deploy Instant WAF Protection Free

Practice Exploiting & Patching This Web Vulnerability in an Interactive Lab

Launch Hands-On Security Lab

Technical Root Cause & Exploitation Mechanics

Official NVD Technical Description

Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlink.

CVSS Score: 7.5 (HIGH)
CWE IDs: CWE-22

Official Vendor Advisories & References

NVD Original English Description

Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlink.

http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html

Source: cve@mitre.org · Exploit, Third Party Advisory, VDB Entry

http://seclists.org/fulldisclosure/2019/Jun/18

Source: cve@mitre.org · Exploit, Mailing List, Third Party Advisory

http://seclists.org/fulldisclosure/2020/Aug/20

Source: cve@mitre.org · Exploit, Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2015/10/21/7

Source: cve@mitre.org · Mailing List, Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1274215

Source: cve@mitre.org · Issue Tracking, Third Party Advisory

https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html

Source: cve@mitre.org · Mailing List, Third Party Advisory

Frequently Asked SecOps Questions (CVE-2011-5325)

FAQ

Q1. How critical is CVE-2011-5325 and is it actively exploited in the wild?

CVE-2011-5325 is rated CVSS 7.5 (HIGH) with a 30-day EPSS exploitation probability of 7.0%. Organizations running affected versions should prioritize patching based on network exposure.

Q2. Which vendors and products are affected by CVE-2011-5325?

Primary impacted vendors include security-advisory across software. Scope summary: Refer to official NVD CPE configuration entries

Q3. What temporary mitigations or workarounds exist for CVE-2011-5325 before patching?

[Mitigation] Review official patches and verify network isolation controls. Follow the CLI remediation commands and interactive SecOps checklist on this page to restrict exposure prior to your maintenance window.

SECOPS WORKBENCH INTEGRATION