CVE-2015-2304

Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive...

CVE-2015-2304

Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive...

UBUNTU-CVE-2015-2304

Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive...

CVE-2015-2304: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive...

MGASA-2015-0106 Updated libarchive packages fix security vulnerability

Updated libarchive packages fix security vulnerability: Alexander Cherepanov discovered that bsdcpio, an implementation of the "cpio" program part of the libarchive project, is susceptible to a directory traversal vulnerability via absolute paths...

Updated libarchive packages fix security vulnerability

Updated libarchive packages fix security vulnerability: Alexander Cherepanov discovered that bsdcpio, an implementation of the "cpio" program part of the libarchive project, is susceptible to a directory traversal vulnerability via absolute paths...

PT-2015-7887

Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description The issue is related to a directory traversal vulnerability via absolute paths in the bsdcpio program, which is part of the libarchive project. This was discovered by Alexander Cherepanov...

[SECURITY] [DLA 166-1] libarchive security update

Package : libarchive Version : 2.8.4.forreal-1+squeeze3 CVE ID : not yet assigned Debian Bug : 778266 Alexander Cherepanov discovered that bsdcpio, an implementation of the cpio program part of the libarchive project, is susceptible to a directory traversal vulnerability via absolute paths...

DLA-166-1 libarchive - security update

Bulletin has no description...

Debian DSA-3180-1 : libarchive - security update

Alexander Cherepanov discovered that bsdcpio, an implementation of the'cpio' program part of the libarchive project, is susceptible to a directory traversal vulnerability via absolute paths. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

[SECURITY] [DSA 3180-1] libarchive security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3180-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini March 05, 2015 http://www.debian.org/security/faq -...

DSA-3180-1 libarchive - security update

Bulletin has no description...

Debian Security Advisory DSA 3180-1 (libarchive - security update)

Alexander Cherepanov discovered that bsdcpio, an implementation of the cpio program part of the libarchive project, is susceptible to a directory traversal vulnerability via absolute paths. OpenVAS Vulnerability Test $Id: deb3180.nasl 8972 2018-02-28 07:02:10Z cfischer $ Auto-generated from...

PT-2015-5703

Name of the Vulnerable Software and Affected Versions libarchive versions 3.1.2 and earlier Description The issue allows remote attackers to write to arbitrary files via a full pathname in an archive. This is due to an absolute path traversal vulnerability in bsdcpio. Recommendations For libarchi...

Debian: Security Advisory (DSA-3180-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2015-3348

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption and application crash, through a crafted gzip file. This is due to an error in resource management,...

openSUSE Security Update : samba (openSUSE-SU-2014:0404-1)

"Samba was updated to 4.1.6, fixing bugs and security issues : - Password lockout not enforced for SAMR password changes, this allowed brute forcing of passwords; CVE-2013-4496; bnc849224. - smbcacls can remove a file or directory ACL by mistake; CVE-2013-6442; bnc855866. Also the following bugs...

GLSA-201406-02 : libarchive: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201406-02 libarchive: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libarchive. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user or automate...

libarchive: Multiple vulnerabilities

Background libarchive is a library for manipulating different streaming archive formats, including certain tar variants, several cpio formats, and both BSD and GNU ar variants. Description Multiple vulnerabilities have been discovered in libarchive. Please review the CVE identifiers referenced...

CVE-2013-0211

Integer signedness error in the archivewritezipdata function in archivewritesetformatzip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers to cause a denial of service crash via unspecified vectors, which triggers an improper conversion between...