CVE-2005-1111 Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpi...
MediumCVSS 4.7
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU cpio | <= 2.6 | No fix listed |
| debian linux | = 3.0 | No fix listed |
| debian linux | = 3.1 | No fix listed |
| Canonical Ubuntu Linux | = 4.10 | No fix listed |
| Canonical Ubuntu Linux | = 5.04 | No fix listed |
| debian/cpio(Debian:12) | < 2.6-6 | 2.6-6 |
| debian/cpio(Debian:13) | < 2.6-6 | 2.6-6 |
| debian/cpio(Debian:14) | < 2.6-6 | 2.6-6 |
References
- SUSE-SR:2006:010 broken-link vendor-advisory
- 20050413 cpio TOCTOU file-permissions vulnerability mailing-list
- 16998 broken-link third-party-advisory
- 17123 broken-link third-party-advisory
- 17532 broken-link third-party-advisory
- 18290 broken-link third-party-advisory
- 18395 broken-link third-party-advisory
- 20117 broken-link third-party-advisory
- DSA-846 third-party-advisory vendor-advisory
- 15725 broken-link vdb-entry
- RHSA-2005:378 broken-link vendor-advisory
- RHSA-2005:806 broken-link vendor-advisory
- 13159 broken-link third-party-advisory vdb-entry
- USN-189-1 third-party-advisory vendor-advisory
- oval:org.mitre.oval:def:358 broken-link signature vdb-entry
- oval:org.mitre.oval:def:9783 broken-link signature vdb-entry
- Debian Security Tracker CVE-2005-1111 vendor-advisory
- bugs.debian.org issue-tracking