View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2002-0399 severity moderate: SUSE including 19 source package names (tar, tar-1.20-23.23.1, …), 70 product×package rows across 33 product lines (SUSE CaaS Platform 4.0, SUSE Enterprise Storage 6, … (33 product lines)): Known Not Affected 53, Fixed 17.
Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary files during archive extraction via a (1) "/.." or (2) "./.." string, which removes the leading slash but leaves the "..", a variant of CVE-2001-1267.