CVE

Id
1552  
CVE No.
CVE-1999-1572  
Status
Candidate  
Description
cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files.  
Phase
Assigned (20050127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
4739 1552 CVE-1999-1572 MISC:http://www.freebsd.org/cgi/query-pr.cgi?pr=bin/1391  View
4740 1552 CVE-1999-1572 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2005-212.pdf  View
4741 1552 CVE-1999-1572 DEBIAN:DSA-664  View
4742 1552 CVE-1999-1572 URL:http://www.debian.org/security/2005/dsa-664  View
4743 1552 CVE-1999-1572 MANDRAKE:MDKSA-2005:032  View
4744 1552 CVE-1999-1572 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:032  View
4745 1552 CVE-1999-1572 REDHAT:RHSA-2005:073  View
4746 1552 CVE-1999-1572 URL:http://www.redhat.com/support/errata/RHSA-2005-073.html  View
4747 1552 CVE-1999-1572 REDHAT:RHSA-2005:080  View
4748 1552 CVE-1999-1572 URL:http://www.redhat.com/support/errata/RHSA-2005-080.html  View
4749 1552 CVE-1999-1572 REDHAT:RHSA-2005:806  View
4750 1552 CVE-1999-1572 URL:http://www.redhat.com/support/errata/RHSA-2005-806.html  View
4751 1552 CVE-1999-1572 TRUSTIX:2005-0003  View
4752 1552 CVE-1999-1572 URL:http://www.trustix.org/errata/2005/0003/  View
4753 1552 CVE-1999-1572 BUGTRAQ:20050204 [USN-75-1] cpio vulnerability  View
4754 1552 CVE-1999-1572 URL:http://marc.info/?l=bugtraq&m=110763404701519&w=2  View
4755 1552 CVE-1999-1572 OVAL:oval:org.mitre.oval:def:10888  View
4756 1552 CVE-1999-1572 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10888  View
4757 1552 CVE-1999-1572 SECUNIA:14357  View
4758 1552 CVE-1999-1572 URL:http://secunia.com/advisories/14357  View
4759 1552 CVE-1999-1572 SECUNIA:17063  View
4760 1552 CVE-1999-1572 URL:http://secunia.com/advisories/17063  View
4761 1552 CVE-1999-1572 SECUNIA:17532  View
4762 1552 CVE-1999-1572 URL:http://secunia.com/advisories/17532  View
4763 1552 CVE-1999-1572 XF:cpio-o-archive-insecure-permissions(19167)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61844 JVNDB-2005-000046 GNU cpio コマンドのオプションにおける不適切なファイルが作成される脆弱性 GNU cpio には、-O オプション または、－F オプションの後にアーカイブファイル名を指定してコマンドを実行した場合、ユーザの umask 値の設定にかかわらず、作成するファイルのパーミッションが 666 となってしまう脆弱性が存在します。 CVE-1999-1572 1552 2.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000046.html  View