CVE-2005-1111

Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete...

CVE-2005-1111

Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete...

CVE-2005-1111

Summary (CVE-2005-1111 family) : The cpio utility (2.6 and earlier) is affected by a local race condition when extracting or creating files, allowing a local attacker with write access to the target directory to modify the permissions of files being created or extracted. Related issues include im...

PT-2005-2128 · Gnu +1 · Cpio +1

Name of the Vulnerable Software and Affected Versions: cpio versions 2.6 and earlier Description: A race condition issue allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed. The permissions of the file are changed by cpio aft...

RHEL 4 : cpio (RHSA-2005:073)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:073 advisory. GNU cpio copies files into or out of a cpio or tar archive. It was discovered that cpio uses a 0 umask when creating files using the -O archive option...

security flaw

cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O archive or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files...

Low: Red Hat Security Advisory: cpio security update

An updated cpio package that fixes a umask bug and supports large files 2GB is now available. This update has been rated as having low security impact by the Red Hat Security Response Team GNU cpio copies files into or out of a cpio or tar archive. It was discovered that cpio uses a 0 umask when...

RHEL 3 : cpio (RHSA-2005:080)

An updated cpio package that fixes a umask bug and supports large files 2GB is now available. This update has been rated as having low security impact by the Red Hat Security Response Team GNU cpio copies files into or out of a cpio or tar archive. It was discovered that cpio uses a 0 umask when...

security flaw

cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O archive or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files...

Low: Red Hat Security Advisory: cpio security update

An updated cpio package that fixes a umask bug is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team GNU cpio copies files into or out of a cpio or tar archive. It was discovered that cpio uses a 0 umask whe...

Mandrake Linux Security Advisory : cpio (MDKSA-2005:032-1)

A vulnerability in cpio was discovered where cpio would create world- writeable files when used in -o/--create mode and giving an output file with -O. This would allow any user to modify the created cpio archive. The updated packages have been patched so that cpio now respects the current umask...

USN-75-1: cpio vulnerability

Recently it was discovered that cpio created world-writeable files when used in -o/--create mode with giving an output file with -O. This allowed any user to modify the created cpio archives. Now cpio respects the current umask setting of the user. Note: This vulnerability has already been fixed ...

Debian DSA-664-1 : cpio - broken file permissions

It has been discovered, that cpio, a program to manage archives of files, creates output files with -O and -F with broken permissions due to a reset zero umask which allows local users to read or overwrite those files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

[SECURITY] [DSA 664-1] New cpio packages fix insecure file permissions

-------------------------------------------------------------------------- Debian Security Advisory DSA 664-1 [email protected] http://www.debian.org/security/ Martin Schulze February 2nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 664-1] New cpio packages fix insecure file permissions

-------------------------------------------------------------------------- Debian Security Advisory DSA 664-1 [email protected] http://www.debian.org/security/ Martin Schulze February 2nd, 2005 http://www.debian.org/security/faq -...

DSA-664-1 cpio - broken file permissions

Bulletin has no description...

CVE-1999-1572

cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O archive or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files...

CVE-1999-1572

CVE-1999-1572 is a local vulnerability affecting GNU cpio where a 0 umask is used when creating files with -O/-F, causing output files to have mode 0666 and enabling local users to read or overwrite them. Connected advisories (RHSA-2005:806, RHSA-2005:073, DSA-664-1, USN-75-1, Ubuntu USN-80-1, Ce...

Solaris 8 (sparc) : 112097-08

The remote host is missing Sun Security Patch number 112097-08 SunOS 5.8: /usr/bin/cpio patch. Date this patch was last updated by Sun : Thu May 29 05:49:39 MDT 2008 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated a...

Solaris 9 (sparc) : 113280-10

SunOS 5.9: cpio patch. Date this patch was last updated by Sun : Apr/02/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid1420...