VDB
CVE-1999-1572
CVE-1999-1572
PUBLISHED
Reported by mitre · Published January 29, 2005
cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | *, n/a, n/a |
Timeline
- Jul 16, 1996 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 3, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 8, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- May 25, 2023 EPSS Score
References
- 20050204 [USN-75-1] cpio vulnerability mailing-listx_refsource_BUGTRAQ
- RHSA-2005:073 vendor-advisoryx_refsource_REDHAT
- cpio-o-archive-insecure-permissions(19167) vdb-entryx_refsource_XF
- 17063 third-party-advisoryx_refsource_SECUNIA
- 17532 third-party-advisoryx_refsource_SECUNIA
- 2005-0003 vendor-advisoryx_refsource_TRUSTIX
- x_refsource_CONFIRM
- RHSA-2005:080 vendor-advisoryx_refsource_REDHAT
- oval:org.mitre.oval:def:10888 vdb-entrysignaturex_refsource_OVAL
- x_refsource_MISC
- 14357 third-party-advisoryx_refsource_SECUNIA
- MDKSA-2005:032 vendor-advisoryx_refsource_MANDRAKE
- DSA-664 vendor-advisoryx_refsource_DEBIAN
- RHSA-2005:806 vendor-advisoryx_refsource_REDHAT