[MBT] new entry in pkg cpio "Overwriting of arbitary files "

bugs at pld-linux.org bugs at pld-linux.org
Wed May 12 13:16:17 CEST 2004


Date: 2004-05-12 13:16:15+02	Author: Krzysztof Taraszka (dzimi) <dzimi at pld-linux.org> 
Title:         Overwriting of arbitary files 
Ticket ID:     #657
Ticket URL:    http://bugs.pld-linux.org/?bug=657
Package:       cpio-1:2.5-1
Distribution:  PLD-1.0.main PLD-1.1.main
Category:      security problem
Current state: closed -- can't be resolved
Text:

No solution was available at the time of this entry.
It is reported that, as a workaround, the target user can invoke the '-t' or '--list' command line switch options and manually check the file path names to ensure that they do not contain directory traversal characters.
*** State changed to 'closed -- can't be resolved'



More information about the pld-bugs mailing list