CVE-2005-1229 Directory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to arbitrary directories via a .. (dot dot) in a cpio file.
MediumCVSS 4.6
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to arbitrary directories via a .. (dot dot) in a cpio file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU cpio | <= 2.6 | No fix listed |
| debian/cpio(Debian:12) | < 2.6-6 | 2.6-6 |
| debian/cpio(Debian:13) | < 2.6-6 | 2.6-6 |
| debian/cpio(Debian:14) | < 2.6-6 | 2.6-6 |
References
- SUSE-SR:2006:010 vendor-advisory
- 20050420 cpio directory traversal vulnerability mailing-list
- 16998 third-party-advisory
- 17123 third-party-advisory
- 18290 third-party-advisory
- 18395 third-party-advisory
- 20117 third-party-advisory
- 27857 third-party-advisory
- DSA-846 vendor-advisory
- MDKSA-2007:233 vendor-advisory
- 17939 vdb-entry
- 13291 vdb-entry
- USN-189-1 vendor-advisory
- cpio-directory-traversal(20204) vdb-entry
- Debian Security Tracker CVE-2005-1229 vendor-advisory
- bugs.debian.org issue-tracking