{"id":"CVE-2015-1197","revision":"d7ced0fb6aa54dd7a647912d84f12cd3","records":[{"revision":"d7ced0fb6aa54dd7a647912d84f12cd3","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2015-1197","aliases":[],"title":"cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.","description":"cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.","state":0,"publishedAt":"2015-02-19T00:00:00+00:00","modifiedAt":"2026-10-14T21:10:58.785+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"n/a\",\n                    \"product\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"version\": \"n/a\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["http://www.securityfocus.com/bid/71914","http://www.mandriva.com/security/advisories?name=MDVSA-2015:066","http://www.openwall.com/lists/oss-security/2015/01/18/7","http://www.ubuntu.com/usn/USN-2906-1","http://advisories.mageia.org/MGASA-2015-0080.html","http://www.openwall.com/lists/oss-security/2015/01/07/5","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774669","https://lists.gnu.org/archive/html/bug-cpio/2015-01/msg00000.html","http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.html","http://www.openwall.com/lists/oss-security/2023/12/21/8","http://www.openwall.com/lists/oss-security/2023/12/27/1"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2015-1197","license":"CVE Program Terms of Use","key":"cve-program:CVE-2015-1197","identifiers":["CVE-2015-1197"]},"retained":false,"historicalAffected":[]}],"coverage":[]}