CVE-2005-1229

概要

参考情報

• ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:03.cpio.asc
• ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.2/SCOSA-2006.2.txt
• ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.32/SCOSA-2005.32.txt
• lists.suse.com/archive/suse-security-announce/2006-May/0004.html
• marc.info
• secunia.com/advisories/16998
• secunia.com/advisories/17123
• secunia.com/advisories/18290
• secunia.com/advisories/18395
• secunia.com/advisories/20117
• secunia.com/advisories/27857
• debian.org/security/2005/dsa-846
• mandriva.com/security/advisories
• osvdb.org/17939
• securityfocus.com/bid/13291
• ubuntu.com/usn/usn-189-1
• exchange.xforce.ibmcloud.com/vulnerabilities/20204

cpio のその他の脆弱性

• CVE-2023-7207中 4.9Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regre…
• CVE-2021-38185高 7.8GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overf…
• CVE-2019-14866高 7.3In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR arc…
• CVE-2016-2037中 6.5The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a …
• CVE-2015-1197低 1.9cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in a…