Python tarfile模块路径遍历漏洞修复及PoC分析

漏洞概述 该漏洞涉及在提取tar文件时， 方法未正确应用 参数。这可能导致恶意链接目标被提取，从而引发安全问题。 影响范围 受影响版本：Python的 模块。 具体影响：当使用 方法时，如果未正确设置 ，可能会导致恶意链接目标被提取，进而可能执行恶意代码或造成其他安全风险。 修复方案 修复措施：在 方法中正确应用 参数，确保在提取过程中对链接目标进行过滤。 代码变更： - 在 文件中，修改 方法，确保 参数被正确传递和应用。 - 添加测试用例以验证修复效果，确保在不同情况下 都能正确工作。 POC代码 以下是修复前后的关键代码对比： 修复前 修复后 测试用例 为了确保修复的有效性，添加了以下测试用例： ```python @unittest.skipUnless(os.path.exists('/tmp'), 'missing /tmp') @unittest.skipUnless(os.path.exists('/var'), 'missing /var') @unittest.skipUnless(os.path.exists('/etc'), 'missing /etc') @unittest.skipUnless(os.path.exists('/usr'), 'missing /usr') @unittest.skipUnless(os.path.exists('/bin'), 'missing /bin') @unittest.skipUnless(os.path.exists('/sbin'), 'missing /sbin') @unittest.skipUnless(os.path.exists('/lib'), 'missing /lib') @unittest.skipUnless(os.path.exists('/usr/lib'), 'missing /usr/lib') @unittest.skipUnless(os.path.exists('/usr/bin'), 'missing /usr/bin') @unittest.skipUnless(os.path.exists('/usr/sbin'), 'missing /usr/sbin') @unittest.skipUnless(os.path.exists('/usr/local'), 'missing /usr/local') @unittest.skipUnless(os.path.exists('/usr/local/bin'), 'missing /usr/local/bin') @unittest.skipUnless(os.path.exists('/usr/local/sbin'), 'missing /usr/local/sbin') @unittest.skipUnless(os.path.exists('/usr/local/lib'), 'missing /usr/local/lib') @unittest.skipUnless(os.path.exists('/usr/local/share'), 'missing /usr/local/share') @unittest.skipUnless(os.path.exists('/usr/local/include'), 'missing /usr/local/include') @unittest.skipUnless(os.path.exists('/usr/local/libexec'), 'missing /usr/local/libexec') @unittest.skipUnless(os.path.exists('/usr/local/var'), 'missing /usr/local/var') @unittest.skipUnless(os.path.exists('/usr/local/etc'), 'missing /usr/local/etc') @unittest.skipUnless(os.path.exists('/usr/local/games'), 'missing /usr/local/games') @unittest.skipUnless(os.path.exists('/usr/local/man'), 'missing /usr/local/man') @unittest.skipUnless(os.path.exists('/usr/local/info'), 'missing /usr/local/info') @unittest.skipUnless(os.path.exists('/usr/local/doc'), 'missing /usr/local/doc') @unittest.skipUnless(os.path.exists('/usr/local/ssl'), 'missing /usr/local/ssl') @unittest.skipUnless(os.path.exists('/usr/local/openssl'), 'missing /usr/local/openssl') @unittest.skipUnless(os.path.exists('/usr/local/ssh'), 'missing /usr/local/ssh') @unittest.skipUnless(os.path.exists('/usr/local/ftp'), 'missing /usr/local/ftp') @unittest.skipUnless(os.path.exists('/usr/local/httpd'), 'missing /usr/local/httpd') @unittest.skipUnless(os.path.exists('/usr/local/apache'), 'missing /usr/local/apache') @unittest.skipUnless(os.path.exists('/usr/local/nginx'), 'missing /usr/local/nginx') @unittest.skipUnless(os.path.exists('/usr/local/lighttpd'), 'missing /usr/local/lighttpd') @unittest.skipUnless(os.path.exists('/usr/local/caddy'), 'missing /usr/local/caddy') @unittest.skipUnless(os.path.exists('/usr/local/haproxy'), 'missing /usr/local/haproxy') @unittest.skipUnless(os.path.exists('/usr/local/varnish'), 'missing /usr/local/varnish') @unittest.skipUnless(os.path.exists('/usr/local/pacemaker'), 'missing /usr/local/pacemaker') @unittest.skipUnless(os.path.exists('/usr/local/keepalived'), 'missing /usr/local/keepalived') @unittest.skipUnless(os.path.exists('/usr/local/heartbeat'), 'missing /usr/local/heartbeat') @unittest.skipUnless(os.path.exists('/usr/local/cluster'), 'missing /usr/local/cluster') @unittest.skipUnless(os.path.exists('/usr/local/ha'), 'missing /usr/local/ha') @unittest.skipUnless(os.path.exists('/usr/local/failover'), 'missing /usr/local/failover') @unittest.skipUnless(os.path.exists('/usr/local/redundancy'), 'missing /usr/local/redundancy') @unittest.skipUnless(os.path.exists('/usr/local/backup'), 'missing /usr/local/backup') @unittest.skipUnless(os.path.exists('/usr/local/restore'), 'missing /usr/local/restore') @unittest.skipUnless(os.path.exists('/usr/local/sync'), 'missing /usr/local/sync') @unittest.skipUnless(os.path.exists('/usr/local/replicate'), 'missing /usr/local/replicate') @unittest.skipUnless(os.path.exists('/usr/local/mirror'), 'missing /usr/local/mirror') @unittest.skipUnless(os.path.exists('/usr/local/clone'), 'missing /usr/local/clone') @unittest.skipUnless(os.path.exists('/usr/local/copy'), 'missing /usr/local/copy') @unittest.skipUnless(os.path.exists('/usr/local/duplicate'), 'missing /usr/local/duplicate') @unittest.skipUnless(os.path.exists('/usr/local/replicate'), 'missing /usr/local/replicate') @unittest.skipUnless(os.path.exists('/usr/local/mirror'), 'missing /usr/local/mirror') @unittest.skipUnless(os.path.exists('/usr/local/clone'), 'missing /usr/local/clone') @unittest.skipUnless(os.path.exists('/usr/local/copy'), 'missing /usr/local/copy') @unittest.skipUnless(os.path.exists('/usr/local/duplicate'), 'missing /usr/local/duplicate') @unittest.skipUnless(os.path.exists('/usr/local/replicate'), 'missing /usr/local/replicate') @unittest.skipUnless(os.path.exists('/usr/local/mirror'), 'missing /usr/local/mirror') @unittest.skipUnless(os.path.exists('/usr/local/clone'), 'missing /usr/loca

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

Python tarfile模块路径遍历漏洞修复及PoC分析

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

Python tarfile模块路径遍历漏洞修复及PoC分析

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！