Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CPIO存储服务器不安全文件创建漏洞
Vulnerability Description
FreeBSD 2.1.0, Debian GNU/Linux 3.0以及可能还包括其他操作系统的cpio,在使用-O (存档)或者-F选项创建文件时会使用一个0 umask,创建了带有0666模式的文件,本地用户可以利用该漏洞读取或覆盖这些文件。
CVSS Information
N/A
Vulnerability Type
N/A