Directory traversal and symbolic links vulnerability in cpio implementation.
vulners.com/securityvulns/securityvulns:doc:31796
vulners.com/securityvulns/securityvulns:doc:31953