NVD

Id
66860  
Name
CVE-2005-1111  
Description
Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete.  
Reject
 
CVSS Version
2  
CVSS Score
3.7  
Severity
Low  
CVSS Base Score
3.7  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-05-02  
Modified Date
2016-10-17  
Seq
2005-1111  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
347203 66860 CVE-2005-1111 FreeBSD-SA-06:03  View
347204 66860 CVE-2005-1111 SCOSA-2006.2  View
347205 66860 CVE-2005-1111 SCOSA-2005.32  View
347206 66860 CVE-2005-1111 SUSE-SR:2006:010  View
347207 66860 CVE-2005-1111 20050413 cpio TOCTOU file-permissions vulnerability  View
347208 66860 CVE-2005-1111 oval:org.mitre.oval:def:358  View
347209 66860 CVE-2005-1111 oval:org.mitre.oval:def:9783  View
347210 66860 CVE-2005-1111 DSA-846  View
347211 66860 CVE-2005-1111 RHSA-2005:378  View
347212 66860 CVE-2005-1111 RHSA-2005:806  View
347213 66860 CVE-2005-1111 13159  View
347214 66860 CVE-2005-1111 USN-189-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62060 JVNDB-2005-000262 GNU cpio コマンドの圧縮ファイル解凍処理における競合状態の脆弱性 GNU cpio には、圧縮ファイルを解凍する際の解凍したファイルの書き込み処理と、パーミッション変更処理との間で、競合状態が発生する脆弱性が存在します。 CVE-2005-1111 12315 CVE-2005-1111 66860 3.7 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000262.html 2005-04-13 2007-04-01 View