CVE-2005-4268 Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size i...
LowCVSS 3.7
EPSS 0.54%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU cpio | = 2.6-8 | No fix listed |
| debian/cpio(Debian:12) | < 2.6-10 | 2.6-10 |
| debian/cpio(Debian:13) | < 2.6-10 | 2.6-10 |
| debian/cpio(Debian:14) | < 2.6-10 | 2.6-10 |
References
- MDKSA-2005:237 vendor-advisory
- SUSE-SR:2006:010 vendor-advisory
- 18251 third-party-advisory
- 18278 third-party-advisory
- 18280 third-party-advisory
- 18395 third-party-advisory
- 20117 third-party-advisory
- 25098 third-party-advisory
- 25161 third-party-advisory
- 22194 vdb-entry
- RHSA-2007:0245 vendor-advisory
- RHSA-2010:0145 vendor-advisory
- 16057 vdb-entry
- bugzilla.redhat.com
- cpio-file-size-bo(23855) vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:10450 signature vdb-entry
- oval:org.mitre.oval:def:6860 signature vdb-entry
- USN-234-1 vendor-advisory
- Debian Security Tracker CVE-2005-4268 vendor-advisory
- bugs.debian.org issue-tracking