Definition

cpio Race Condition

oval:org.mitre.oval:def:358

Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed whose permissions are changed by cpio after the decompression is complete.

Family:

unix

Status:

ACCEPTED

Platform(s):

Red Hat Enterprise Linux 3

Class:

vulnerability

Reference(s):

CVE-2005-1111

Product(s):

cpio