CVE Vulnerabilities

CVE-1999-1572

Published: Jul 16, 1996 | Modified: Oct 19, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED

cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files.

Affected Software

Name Vendor Start Version End Version
Debian_linux Debian 3.0 (including) 3.0 (including)
Freebsd Freebsd 2.1.0 (including) 2.1.0 (including)
Mandrake_linux Mandrakesoft 9.2 (including) 9.2 (including)
Mandrake_linux Mandrakesoft 10.0 (including) 10.0 (including)
Mandrake_linux Mandrakesoft 10.1 (including) 10.1 (including)
Mandrake_linux Mandrakesoft cs2.1 (including) cs2.1 (including)
Mandrake_linux Mandrakesoft cs3.0 (including) cs3.0 (including)
Enterprise_linux Redhat 4.0 (including) 4.0 (including)
Enterprise_linux_desktop Redhat 4.0 (including) 4.0 (including)
Ubuntu_linux Ubuntu 4.10 (including) 4.10 (including)
Red Hat Enterprise Linux 3 RedHat cpio-0:2.5-3e.3 *
Red Hat Enterprise Linux 4 RedHat cpio-0:2.5-7.EL4.1 *
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 RedHat *
Red Hat Enterprise Linux ES version 2.1 RedHat *
Red Hat Enterprise Linux WS version 2.1 RedHat *
Red Hat Linux Advanced Workstation 2.1 RedHat *
Cpio Ubuntu dapper *
Cpio Ubuntu devel *
Cpio Ubuntu edgy *
Cpio Ubuntu feisty *

References