cpio: Schwachstelle ermöglicht Manipulation von Dateien

Summary

Product

Vulnerabilities 1

• Unscored —
  CVE-2015-1197

  cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink …

  cpio cpio cpio Debian Ubuntu Alpine
  Feb 19, 2015

Revision history

1. 2024-03-18 #8

   doppelten Eintrag entfernt

2. 2024-03-04 #7

   Neue Updates von Amazon aufgenommen

3. 2016-02-22 #5

   New remediations available

4. 2016-02-22 #6

   Version nicht vorhanden

5. 2015-03-29 #4

   New remediations available

6. 2015-02-15 #3

   New remediations available

7. 2015-02-02 #1

   Initial Release

8. 2015-02-02 #2

   Version nicht vorhanden

References

• Debian Bug Report #774669 vom 2015-02-02
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774669
• Debian Security Tracker vom 2015-02-02
  https://security-tracker.debian.org/tracker/CVE-2015-1197
• Gentoo Linux Security Advisory GLSA 201502-11 vom 2015-02-15
  http://bugs.gentoo.org/show_bug.cgi?id=530512
• Gentoo Linux Security Advisory GLSA 201502-11 vom 2015-02-15
  http://security.gentoo.org/glsa/glsa-201502-11.xml
• Gentoo Linux Security Advisory GLSA 201502-11 vom 2015-02-15
  http://security.gentoo.org/glsa/glsa-201502-11.xml
• Mandriva Security Advisory MDVSA-2015:066 vom 2015-03-27
  http://www.mandriva.com/de/support/security/advisories/advisory/MDVSA-2015%3A066/
• Mandriva Security Advisory MDVSA-2015:065 vom 2015-03-27
  http://www.mandriva.com/de/support/security/advisories/advisory/MDVSA-2015%3A065/
• Ubuntu Security Notice USN-2906-1 vom 2016-02-23
  http://www.ubuntu.com/usn/usn-2906-1/
• Amazon Linux Security Advisory ALAS-2024-2489 vom 2024-03-05
  https://alas.aws.amazon.com/AL2/ALAS-2024-2489.html
• Amazon Linux Security Advisory ALAS-2024-1925 vom 2024-03-05
  https://alas.aws.amazon.com/ALAS-2024-1925.html