|
Mandrake update for cpio
|
|
Secunia Advisory:
|
SA14230
|
|
|
Release Date:
|
2005-02-11
|
|
Last Update:
|
2005-02-14
|
|
Popularity:
|
5,882 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Manipulation of data
Exposure of sensitive information
|
|
Where:
|
Local system
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Mandrake Corporate Server 2.x
Mandrake Linux 9.x
Mandrakelinux 10.0
Mandrakelinux 10.1
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-1999-1572
|
|
Description:
MandrakeSoft has issued an update for cpio. This fixes a vulnerability, which can be exploited by malicious, local users to disclose and manipulate information.
The problem is that output files are created with insecure permissions, which makes it possible for other users to read and manipulate the contents.
Solution:
Apply updated packages.
Mandrakelinux 10.0:
d57c7da9aeb61ac87d7d7fb6bdef4d22 10.0/RPMS/cpio-2.5-4.1.100mdk.i586.rpm
ddb4e640cdd6b4b51f773b186cdefe9c 10.0/SRPMS/cpio-2.5-4.1.100mdk.src.rpm
Mandrakelinux 10.0/AMD64:
e747606a775c27a647a2260e1b3b9b7c amd64/10.0/RPMS/cpio-2.5-4.1.100mdk.amd64.rpm
ddb4e640cdd6b4b51f773b186cdefe9c amd64/10.0/SRPMS/cpio-2.5-4.1.100mdk.src.rpm
Mandrakelinux 10.1:
a298815e1095a9d67216de7a03b165fd 10.1/RPMS/cpio-2.5-4.2.101mdk.i586.rpm
803ce098932b51a8c6e67d240b8de436 10.1/SRPMS/cpio-2.5-4.2.101mdk.src.rpm
Mandrakelinux 10.1/X86_64:
294436bfdb9d38edf1e8435ab2875a6a x86_64/10.1/RPMS/cpio-2.5-4.2.101mdk.x86_64.rpm
803ce098932b51a8c6e67d240b8de436 x86_64/10.1/SRPMS/cpio-2.5-4.2.101mdk.src.rpm
Corporate Server 2.1:
ffd629c3f731da92a47b2928bb75284f corporate/2.1/RPMS/cpio-2.5-4.1.C21mdk.i586.rpm
f14c2506f6be97b9bf6f5611677a92af corporate/2.1/SRPMS/cpio-2.5-4.1.C21mdk.src.rpm
Corporate Server 2.1/X86_64:
6b8a131de0dfc58532e2db1b1d8182ef x86_64/corporate/2.1/RPMS/cpio-2.5-4.1.C21mdk.x86_64.rpm
f14c2506f6be97b9bf6f5611677a92af x86_64/corporate/2.1/SRPMS/cpio-2.5-4.1.C21mdk.src.rpm
Mandrakelinux 9.2:
c1556a3b2c0e71395d3142c407f7818a 9.2/RPMS/cpio-2.5-4.1.92mdk.i586.rpm
7f6ff46548e0a49568dcdafcd731166e 9.2/SRPMS/cpio-2.5-4.1.92mdk.src.rpm
Mandrakelinux 9.2/AMD64:
11bdf70272c80c81e723b75f58745033 amd64/9.2/RPMS/cpio-2.5-4.1.92mdk.amd64.rpm
7f6ff46548e0a49568dcdafcd731166e amd64/9.2/SRPMS/cpio-2.5-4.1.92mdk.src.rpm
Changelog:
2005-02-14: Vendor issues new updated packages for 10.1.
Original Advisory:
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2005:032
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
