Launchpad.net

CVE 2011-5325

Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlink.

See the CVE page on Mitre.org for more details.