CVE-2005-4268

cpio 2.6-8.FC4 - Buffer Overflow via Large File Size Representation

Title source: llm
STIX 2.1

Description

Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a file whose size is represented by more than 8 digits.

References (20)

Core 20
Core References
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-1338
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25098
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0245.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25161
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/23855
Various Sources vendor-advisory x_refsource_freebsd
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:03.cpio.asc
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18280
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/22194
Various Sources vendor-advisory x_refsource_mandriva
http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:237
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6860
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0145.html
Various Sources vendor-advisory x_refsource_suse
http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20117
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10450
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/16057
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18278
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18395
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18251
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/234-1/

Scores

EPSS 0.0005
EPSS Percentile 15.8%

Details

CWE
CWE-119
Status published
Products (1)
gnu/cpio 2.6-8
Published Dec 15, 2005
Tracked Since Feb 18, 2026