Lucene search

K
osvGoogleOSV:DSA-664-1
HistoryFeb 02, 2005 - 12:00 a.m.

cpio - broken file permissions

2005-02-0200:00:00
Google
osv.dev
7

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

It has been discovered, that cpio, a program to manage archives of
files, creates output files with -O and -F with broken permissions due
to a reset zero umask which allows local users to read or overwrite
those files.

For the stable distribution (woody) this problem has been fixed in
version 2.4.2-39woody1.

For the unstable distribution (sid) this problem will be fixed soon.

We recommend that you upgrade your cpio package.

CPENameOperatorVersion
cpioeq2.4.2-39

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N