cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive...
1.9CVSS6.7AI score0.02906EPSS
SaveExploits4References1
NVD•added 2015/02/19 3:59 p.m.•28 views
CVE-2015-1197
cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive...