NetSight
IP …
medium4.7

CVE-2005-1111

Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompres…

Impact

Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete.

Affected products

VendorProductAffected versions
GnuCpio
through 2.6
DebianDebian Linux
Versions 3.0, 3.1
CanonicalUbuntu Linux
Versions 4.10, 5.04

Weakness classification

CWE-59CWE-367

References