Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
build cpio 安全漏洞
Vulnerability Description
cpio是GNU计划开发的一套用于UNIX操作系统中的文件备份工具,也是一种文件格式。该工具支持从cpio或tar格式的归档包中存入和读取文件。 build 2007.05.10和2010.07.28版本中使用的cpio工具中存在安全漏洞。远程攻击者可通过RPM包归档中的符号链接利用该漏洞覆盖任意文件。
CVSS Information
N/A
Vulnerability Type
N/A