CVE-2015-1197

Published: Feb 19, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

71914

vdb-entry

MDVSA-2015:066

vendor-advisory

[oss-security] 20150118 Re: CVE Request: cpio -- directory traversal

mailing-list

USN-2906-1

vendor-advisory

http://advisories.mageia.org/MGASA-2015-0080.html

[oss-security] 20150108 Directory traversals in cpio and friends?

mailing-list

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774669

[Bug-cpio] 20150108 cpio: directory traversal vulnerability via symlinks

mailing-list

http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.html

[oss-security] 20231221 Security vulnerability in Debian's cpio 2.13

mailing-list

[oss-security] 20231227 xarchiver: Path traversal with crafted cpio archives

mailing-list

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2015-1197

Description

Affected Products

References