Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:
Category:Debian Local Security Checks
Title:Debian Security Advisory DSA 664-1 (cpio)
The remote host is missing an update to cpio
announced via advisory DSA 664-1.

It has been discovered, that cpio, a program to manage archives of
files, creates output files with -O and -F with broken permissions due
to a reset zero umask which allows local users to read or overwrite
those files.

For the stable distribution (woody) this problem has been fixed in
version 2.4.2-39woody1

For the unstable distribution (sid) this problem will be fixed soon.

We recommend that you upgrade your cpio package.


CVSS Score:

CVSS Vector:

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-1999-1572
Bugtraq: 20050204 [USN-75-1] cpio vulnerability (Google Search)
Debian Security Information: DSA-664 (Google Search)
XForce ISS Database: cpio-o-archive-insecure-permissions(19167)
CopyrightCopyright (c) 2005 E-Soft Inc.

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.

© 1998-2022 E-Soft Inc. All rights reserved.