[MBT] new entry in pkg cpio "Overwriting of arbitary files "
bugs at pld-linux.org
bugs at pld-linux.org
Wed May 12 13:16:17 CEST 2004
Date: 2004-05-12 13:16:15+02 Author: Krzysztof Taraszka (dzimi) <dzimi at pld-linux.org>
Title: Overwriting of arbitary files
Ticket ID: #657
Ticket URL: http://bugs.pld-linux.org/?bug=657
Package: cpio-1:2.5-1
Distribution: PLD-1.0.main PLD-1.1.main
Category: security problem
Current state: closed -- can't be resolved
Text:
No solution was available at the time of this entry.
It is reported that, as a workaround, the target user can invoke the '-t' or '--list' command line switch options and manually check the file path names to ensure that they do not contain directory traversal characters.
*** State changed to 'closed -- can't be resolved'
More information about the pld-bugs
mailing list