CVE-2015-1197

Currently unrated

Key Information:

Vendor: Gnu
Status: Cpio
Vendor: CVE Published:; 19 February 2015

Summary

cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.

References

http://www.securityfocus.com/bid/71914

vdb-entry

http://www.mandriva.com/security/advisories?name=MDVSA-20...

vendor-advisory

http://www.openwall.com/lists/oss-security/2015/01/18/7

mailing-list

Timeline

Vulnerability published
Feb 19, 2015
Vulnerability Reserved
Jan 18, 2015