1022 matches found
Mandrake Linux Security Advisory : cpio (MDKSA-2005:237)
A buffer overflow in cpio 2.6 on 64-bit platforms could allow a local user to create a DoS crash and possibly execute arbitrary code when creating a cpio archive with a file whose size is represented by more than 8 digits. The updated packages have been patched to correct these problems...
Ubuntu 4.10 : cpio vulnerability (USN-75-1)
Recently it was discovered that cpio created world-writeable files when used in -o/--create mode with giving an output file with -O. This allowed any user to modify the created cpio archives. Now cpio respects the current umask setting of the user. Note: This vulnerability has already been fixed ...
Ubuntu 4.10 / 5.04 : cpio vulnerabilities (USN-189-1)
Imran Ghory found a race condition in the handling of output files. While a file was unpacked with cpio, a local attacker with write permissions to the target directory could exploit this to change the permissions of arbitrary files of the cpio user. CAN-2005-1111 Imran Ghory discovered a path...
FreeBSD-SA-06:03.cpio
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:03.cpio Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities cpio Category: contrib Module: contribcpio Announced: 2006-01-11 Credits: Imran...
cpio -- multiple vulnerabilities
Problem description: A number of issues has been discovered in cpio: When creating a new file, cpio closes the file before setting its permissions. CVE-2005-1111 When extracting files cpio does not properly sanitize file names to filter out ".." components, even if the --no-absolute-filenames...
USN-234-1: cpio vulnerability
Richard Harms discovered that cpio did not sufficiently validate file properties when creating archives. Files with e. g. a very large size caused a buffer overflow. By tricking a user or an automatic backup system into putting a specially crafted file into a cpio archive, a local attacker could...
CVE-2005-4268
Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service crash and possibly execute arbitrary code via a file whose size is represented by more than 8 digits...
DEBIAN-CVE-2005-4268
Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service crash and possibly execute arbitrary code via a file whose size is represented by more than 8 digits...
CVE-2005-4268
Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service crash and possibly execute arbitrary code via a file whose size is represented by more than 8 digits...
CVE-2005-4268
Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service crash and possibly execute arbitrary code via a file whose size is represented by more than 8 digits...
CVE-2005-4268
Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service crash and possibly execute arbitrary code via a file whose size is represented by more than 8 digits...
CVE-2005-4268
CVE-2005-4268 is a buffer overflow vulnerability in GNU cpio, reported on 64-bit platforms when creating archives. The issue arises from handling a file size represented by more than 8 digits, enabling a local user to crash the cpio process and potentially gain code execution. Public details acro...
CVE-2005-4268
Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service crash and possibly execute arbitrary code via a file whose size is represented by more than 8 digits...
RHEL 2.1 : cpio (RHSA-2005:806)
An updated cpio package that fixes multiple issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A race condition bug was found in cpio. It is possible for a local...
cpio security update
CentOS Errata and Security Advisory CESA-2005:806-01 An updated cpio package that fixes multiple issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A race condition bu...
Low: Red Hat Security Advisory: cpio security update
An updated cpio package that fixes multiple issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A race condition bug was found in cpio. It is possible for a local...
Debian DSA-846-1 : cpio - several vulnerabilities
Two vulnerabilities have been discovered in cpio, a program to manage archives of files. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-1111 Imran Ghory discovered a race condition in setting the file permissions of files extracted from cpio...
[SECURITY] [DSA 846-1] New cpio packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 846-1 [email protected] http://www.debian.org/security/ Martin Schulze October 7th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 846-1] New cpio packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 846-1 [email protected] http://www.debian.org/security/ Martin Schulze October 7th, 2005 http://www.debian.org/security/faq -...