OSVDB ID: 15725 Title: cpio Race Condition Arbitrary File Permission Modification |
Info |
|
|
Dates |
||||
|
|
Description |
cpio contains a flaw that may allow a malicious user to modify permissions of arbitrary files. The issue is triggered via a hard link attack on a file while it is being decompressed. It is possible that the flaw may allow arbitrary file permission modification resulting in a loss of confidentiality and integrity. |
Classification |
Location:
Local Access Required
Attack Type: Race Condition Impact: Loss of Confidentiality, Loss of Integrity Exploit: Exploit Public |
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue. |
Products |
|
Credit |
|
gmail.com -