CVE-2005-1111: Race Condition
Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability associated with CVE-2005-1111?
CVE-2005-1111 is a race condition in cpio 2.6 and earlier that allows local users to modify permissions of arbitrary files through a hard link attack during file decompression.
What versions of GNU cpio are affected by CVE-2005-1111?
GNU cpio versions 1.0 through 2.6 are affected by CVE-2005-1111.
How can I mitigate the risk of CVE-2005-1111?
To mitigate CVE-2005-1111, avoid using vulnerable versions of cpio and consider upgrading to a version that has patched this vulnerability.
What types of attacks are possible due to CVE-2005-1111?
CVE-2005-1111 could allow an attacker to change file permissions unexpectedly, which can lead to unauthorized access to sensitive files.
Is CVE-2005-1111 a local or remote vulnerability?
CVE-2005-1111 is a local vulnerability that requires an attacker to have local user access to exploit it.