Gentoo Security Advisory GLSA 200711-18 (cpio)

The remote host is missing updates announced in advisory GLSA 200711-18. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200506-16 (cpio)

The remote host is missing updates announced in advisory GLSA 200506-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200506-16 (cpio)

The remote host is missing updates announced in advisory GLSA 200506-16. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Security Advisory (FreeBSD-SA-07:05.libarchive.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-07:05.libarchive.asc ADV FreeBSD-SA-07:05.libarchive.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 20...

FreeBSD Security Advisory (FreeBSD-SA-06:03.cpio.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:03.cpio.asc ADV FreeBSD-SA-06:03.cpio.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

FreeBSD Security Advisory (FreeBSD-SA-06:03.cpio.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:03.cpio.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Debian: Security Advisory (DSA-1566-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1566-1 (cpio)

The remote host is missing an update to cpio announced via advisory DSA 1566-1. OpenVAS Vulnerability Test $Id: deb15661.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1566-1 cpio Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1566-1 : cpio - programming error

Dmitry Levin discovered a vulnerability in path handling code used by the cpio archive utility. The weakness could enable a denial of service crash or potentially the execution of arbitrary code if a vulnerable version of cpio is used to extract or to list the contents of a maliciously crafted...

[SECURITY] [DSA 1566-1] New cpio packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1566-1 [email protected] http://www.debian.org/security/ Steve Kemp May 02, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

DSA-1566-1 cpio - programming error

Bulletin has no description...

Debian Security Advisory DSA 664-1 (cpio)

The remote host is missing an update to cpio announced via advisory DSA 664-1. OpenVAS Vulnerability Test $Id: deb6641.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 664-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 846-1 (cpio)

The remote host is missing an update to cpio announced via advisory DSA 846-1. Two vulnerabilities have been discovered in cpio, a program to manage archives of files. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-1111 Imran Ghory discovered a race...

Debian: Security Advisory (DSA-664-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-846-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : cpio (ZYPP Patch Number 4184)

This update fixes a bug in function safernamesuffix of cpio which leads to a crashing stack. Exploitability is unknown. CVE-2007-4476 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

Mandrake Linux Security Advisory : cpio (MDKSA-2007:233)

Buffer overflow in the safernamesuffix function in GNU cpio has unspecified attack vectors and impact, resulting in a crashing stack. This problem is originally found in tar, but affects cpio too, due to similar code fragments. CVE-2007-4476 Directory traversal vulnerability in cpio 2.6 and earli...

GNU TAR和CPIO safer_name_suffix远程拒绝服务漏洞

BUGTRAQ ID: 26445 CVECAN ID: CVE-2007-4476 GNU Tar和GNU Cpio都是流行的用于管理档案文件的程序。 tar和cpio使用的safernamesuffix函数使用alloca报告所要剥离的前缀字符串，而这个字符串的长度（也就是传送给alloca的大小）是受tarball所有者控制的。因此，只要字符串超长就可以触发栈溢出。由于alloca之后的memcpy调用，这个溢出只能导致崩溃 GNU cpio 2.6 GNU cpio 2.5 GNU cpio 2.4 GNU cpio 1.x GNU tar 1.16 GNU tar 1.15 G...

GLSA-200711-18 : Cpio: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200711-18 Cpio: Buffer overflow A buffer overflow vulnerability in the safernamesuffix function in GNU cpio has been discovered. Impact : A remote attacker could entice a user to open a specially crafted archive file resulting in ...

Cpio: Buffer overflow

Background GNU cpio copies files into or out of a cpio or tar archive. Description A buffer overflow vulnerability in the safernamesuffix function in GNU cpio has been discovered. Impact A remote attacker could entice a user to open a specially crafted archive file resulting in a stack-based buff...