Search
Get a Demo

published date: May 2, 2005

CVE-2005-1111 : Race Condition Vulnerability

Description

Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete.

Product(s):

  • GNU Cpio
  • GNU cpio
  • GNU cpio 1.0
  • GNU cpio 1.1
  • GNU cpio 1.2
  • GNU cpio 1.3
  • CVSS:4.7 [Critical]
  • EPSS:0.08%
  • Exploitability:1
  • In KEV:No

Question to Ask Vendors:

  1. Can you confirm whether your systems are affected by CVE-2005-1111, and if so, what steps are you currently taking to mitigate this vulnerability?
  2. What is your estimated timeline for fully resolving CVE-2005-1111 in your products or services, and how will you communicate updates on this issue to us as your customer?

READY TO GET RESULTS YOU CAN TRUST?

Get a Demo Contact Sales