openSUSE Security Update : build (openSUSE-SU-2011:0174-1)

The build script uses cpio to extract untrusted rpm packages for bootstrapping virtual machines. cpio is not safe to use for this task, therefore the build script now uses bsdtar instead CVE-2010-4226. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

CVE-2010-4226

cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive...

Code injection

cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive...

CVE-2010-4226

cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive...

CVE-2010-4226

cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive...

CVE-2010-4226

The cpio utility, specifically in build 2007.05.10 , 2010.07.28 , and potentially other versions, contains a vulnerability where a remote attacker can overwrite arbitrary files . This occurs due to improper link resolution (CWE-59 ) when processing a symlink within an RPM package archive . In ope...

CVE-2010-4226

cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive...

CVE-2010-4226: Improper Link Resolution Before File Access

cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive...

GLSA-201311-21 : cpio: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201311-21 cpio: Arbitrary code execution Cpio contains a heap-based buffer overflow in the rmtread function in lib/rtapelib.c. Impact : A remote server could sending more data than was requested, related to archive filenames that...

Oracle Linux 3 : cpio (ELSA-2010-0145)

From Red Hat Security Advisory 2010:0145 : An updated cpio package that fixes two security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or ta...

Oracle Linux 4 : cpio (ELSA-2010-0143)

From Red Hat Security Advisory 2010:0143 : An updated cpio package that fixes one security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar...

Oracle Linux 5 : cpio (ELSA-2010-0144)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2010-0144 advisory. - CVE-2010-0624 fix heap-based buffer overflow by expanding a specially-crafted archive Tenable has extracted the preceding description block directly...

CentOS 4 : cpio (CESA-2007:0245)

An updated cpio package that fixes a security issue and various bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A buffer overflow was found in cpio on 64-bit platform...

Fedora Update for libarchive FEDORA-2013-4537

Check for the Version of libarchive OpenVAS Vulnerability Test Fedora Update for libarchive FEDORA-2013-4537 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

[SECURITY] Fedora 17 Update: libarchive-3.0.4-3.fc17

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

[SECURITY] Fedora 17 Update: mingw-libarchive-3.0.4-4.fc17

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

[SECURITY] Fedora 18 Update: mingw-libarchive-3.0.4-4.fc18

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

Fedora Update for mingw-libarchive FEDORA-2013-4576

Check for the Version of mingw-libarchive OpenVAS Vulnerability Test Fedora Update for mingw-libarchive FEDORA-2013-4576 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

Fedora Update for mingw-libarchive FEDORA-2013-4592

Check for the Version of mingw-libarchive OpenVAS Vulnerability Test Fedora Update for mingw-libarchive FEDORA-2013-4592 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

Scientific Linux Security Update : cpio on on SL4 i386/x86_64

A buffer overflow was found in cpio on 64-bit platforms. By tricking a user into adding a specially crafted large file to a cpio archive, a local attacker may be able to exploit this flaw to execute arbitrary code with the target user's privileges. CVE-2005-4268 %NASLMINLEVEL 70300 C Tenable...