CVE-2015-1197 - Vulnerability Details - OpenCVE

cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.03944.

Key SSVC decision points have not yet been added.

Vendors	Products
Gnu	Cpio

Configuration 1 [-]

cpe:2.3:a:gnu:cpio:2.11:*:*:*:*:*:*:*

No data.

No data.

Advisories

Source	ID	Title
Ubuntu USN	USN-2906-1	GNU cpio vulnerabilities

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://advisories.mageia.org/MGASA-2015-0080.html
http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.html
http://www.mandriva.com/security/advisories?name=MDVSA-2015:066
http://www.openwall.com/lists/oss-security/2015/01/07/5
http://www.openwall.com/lists/oss-security/2015/01/18/7
http://www.openwall.com/lists/oss-security/2023/12/21/8
http://www.openwall.com/lists/oss-security/2023/12/27/1
http://www.securityfocus.com/bid/71914
http://www.ubuntu.com/usn/USN-2906-1
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774669
https://lists.gnu.org/archive/html/bug-cpio/2015-01/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2015-1197
https://www.cve.org/CVERecord?id=CVE-2015-1197

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2015-02-19T00:00:00

Updated: 2024-08-06T04:33:20.813Z

Reserved: 2015-01-18T00:00:00

Link: CVE-2015-1197

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2015-02-19T15:59:12.377

Modified: 2025-04-12T10:46:40.837

Link: CVE-2015-1197

Redhat

Severity : Low

Publid Date: 2015-01-05T00:00:00Z

Links: CVE-2015-1197 - Bugzilla

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2015-1197", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-08-06T04:33:20.813Z", "dateReserved": "2015-01-18T00:00:00", "datePublished": "2015-02-19T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-12-27T15:06:17.838860"}, "descriptions": [{"lang": "en", "value": "cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"name": "71914", "tags": ["vdb-entry"], "url": "http://www.securityfocus.com/bid/71914"}, {"name": "MDVSA-2015:066", "tags": ["vendor-advisory"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:066"}, {"name": "[oss-security] 20150118 Re: CVE Request: cpio -- directory traversal", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2015/01/18/7"}, {"name": "USN-2906-1", "tags": ["vendor-advisory"], "url": "http://www.ubuntu.com/usn/USN-2906-1"}, {"url": "http://advisories.mageia.org/MGASA-2015-0080.html"}, {"name": "[oss-security] 20150108 Directory traversals in cpio and friends?", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2015/01/07/5"}, {"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774669"}, {"name": "[Bug-cpio] 20150108 cpio: directory traversal vulnerability via symlinks", "tags": ["mailing-list"], "url": "https://lists.gnu.org/archive/html/bug-cpio/2015-01/msg00000.html"}, {"url": "http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.html"}, {"name": "[oss-security] 20231221 Security vulnerability in Debian's cpio 2.13", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/12/21/8"}, {"name": "[oss-security] 20231227 xarchiver: Path traversal with crafted cpio archives", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/12/27/1"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}], "datePublic": "2015-01-06T00:00:00"}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T04:33:20.813Z"}, "title": "CVE Program Container", "references": [{"name": "71914", "tags": ["vdb-entry", "x_transferred"], "url": "http://www.securityfocus.com/bid/71914"}, {"name": "MDVSA-2015:066", "tags": ["vendor-advisory", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:066"}, {"name": "[oss-security] 20150118 Re: CVE Request: cpio -- directory traversal", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2015/01/18/7"}, {"name": "USN-2906-1", "tags": ["vendor-advisory", "x_transferred"], "url": "http://www.ubuntu.com/usn/USN-2906-1"}, {"url": "http://advisories.mageia.org/MGASA-2015-0080.html", "tags": ["x_transferred"]}, {"name": "[oss-security] 20150108 Directory traversals in cpio and friends?", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2015/01/07/5"}, {"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774669", "tags": ["x_transferred"]}, {"name": "[Bug-cpio] 20150108 cpio: directory traversal vulnerability via symlinks", "tags": ["mailing-list", "x_transferred"], "url": "https://lists.gnu.org/archive/html/bug-cpio/2015-01/msg00000.html"}, {"url": "http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.html", "tags": ["x_transferred"]}, {"name": "[oss-security] 20231221 Security vulnerability in Debian's cpio 2.13", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/12/21/8"}, {"name": "[oss-security] 20231227 xarchiver: Path traversal with crafted cpio archives", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/12/27/1"}]}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:gnu:cpio:2.11:*:*:*:*:*:*:*", "matchCriteriaId": "D68C6D55-2BC4-4F00-B5EF-203DE849AD60", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive."}, {"lang": "es", "value": "cpio 2.11, cuando utiliza la opci\u00f3n --no-absolute-filenames, permite a usuarios locales escribir ficheros arbitrarios a trav\u00e9s de un ataque de enlace simb\u00f3lico sobre un fichero en un archivo."}], "evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/61.html\">CWE-61: UNIX Symbolic Link (Symlink) Following</a>", "id": "CVE-2015-1197", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 1.9, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 3.4, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2015-02-19T15:59:12.377", "references": [{"source": "cve@mitre.org", "url": "http://advisories.mageia.org/MGASA-2015-0080.html"}, {"source": "cve@mitre.org", "url": "http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.html"}, {"source": "cve@mitre.org", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:066"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.openwall.com/lists/oss-security/2015/01/07/5"}, {"source": "cve@mitre.org", "url": "http://www.openwall.com/lists/oss-security/2015/01/18/7"}, {"source": "cve@mitre.org", "url": "http://www.openwall.com/lists/oss-security/2023/12/21/8"}, {"source": "cve@mitre.org", "url": "http://www.openwall.com/lists/oss-security/2023/12/27/1"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/71914"}, {"source": "cve@mitre.org", "url": "http://www.ubuntu.com/usn/USN-2906-1"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774669"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "https://lists.gnu.org/archive/html/bug-cpio/2015-01/msg00000.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://advisories.mageia.org/MGASA-2015-0080.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:066"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.openwall.com/lists/oss-security/2015/01/07/5"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2015/01/18/7"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2023/12/21/8"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2023/12/27/1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/71914"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.ubuntu.com/usn/USN-2906-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774669"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "https://lists.gnu.org/archive/html/bug-cpio/2015-01/msg00000.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}