Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
3.7
CVSSv2

CVE-2005-4268

Published: 15/12/2005 Updated: 03/10/2018
CVSS v2 Base Score: 3.7 | Impact Score: 6.4 | Exploitability Score: 1.9
VMScore: 329
Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Subscribe to Cpio

Vulnerability Summary

Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits.

Vulnerable Product Search on Vulmon Subscribe to Product

gnu cpio 2.6-8

Vendor Advisories

Red Hat: Moderate: cpio security update
Synopsis Moderate: cpio security update Type/Severity Security Advisory: Moderate Topic An updated cpio package that fixes two security issues is now available forRed Hat Enterprise Linux 3This update has been rated as having moderate security impact by the RedHat Security Response Team Descripti ...
Debian CVElist Bug Report Logs: CVE-2005-4268: Buffer overflow on 64 bit archs
Debian Bug report logs - #344134 CVE-2005-4268: Buffer overflow on 64 bit archs Package: cpio; Maintainer for cpio is Anibal Monsalve Salazar <anibal@debianorg>; Source for cpio is src:cpio (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Tue, 20 Dec 2005 10:03:04 UTC Severity: important ...
Ubuntu Security Notice: cpio vulnerability
Richard Harms discovered that cpio did not sufficiently validate file properties when creating archives Files with e g a very large size caused a buffer overflow By tricking a user or an automatic backup system into putting a specially crafted file into a cpio archive, a local attacker could probably exploit this to execute arbitrary code with ...

References

CWE-119https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=172669http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:237http://www.securityfocus.com/bid/16057http://secunia.com/advisories/18251http://secunia.com/advisories/18278http://secunia.com/advisories/18280ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:03.cpio.aschttp://www.osvdb.org/22194http://secunia.com/advisories/18395http://lists.suse.com/archive/suse-security-announce/2006-May/0004.htmlhttp://secunia.com/advisories/20117http://www.redhat.com/support/errata/RHSA-2007-0245.htmlhttp://secunia.com/advisories/25098https://issues.rpath.com/browse/RPL-1338http://secunia.com/advisories/25161http://www.redhat.com/support/errata/RHSA-2010-0145.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/23855https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6860https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10450https://usn.ubuntu.com/234-1/https://access.redhat.com/errata/RHSA-2010:0145https://usn.ubuntu.com/234-1/https://nvd.nist.gov
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook