Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2010-4226

cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 62.6%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2010-4226
  • Gnu » Cpio » Version: N/A
    cpe:2.3:a:gnu:cpio:-
  • Gnu » Cpio » Version: 1.0
    cpe:2.3:a:gnu:cpio:1.0
  • Gnu » Cpio » Version: 1.1
    cpe:2.3:a:gnu:cpio:1.1
  • Gnu » Cpio » Version: 1.2
    cpe:2.3:a:gnu:cpio:1.2
  • Gnu » Cpio » Version: 1.3
    cpe:2.3:a:gnu:cpio:1.3
  • Gnu » Cpio » Version: 2.10
    cpe:2.3:a:gnu:cpio:2.10
  • Gnu » Cpio » Version: 2.11
    cpe:2.3:a:gnu:cpio:2.11
  • Gnu » Cpio » Version: 2.12
    cpe:2.3:a:gnu:cpio:2.12
  • Gnu » Cpio » Version: 2.13
    cpe:2.3:a:gnu:cpio:2.13
  • Gnu » Cpio » Version: 2.4-2
    cpe:2.3:a:gnu:cpio:2.4-2
  • Gnu » Cpio » Version: 2.5
    cpe:2.3:a:gnu:cpio:2.5
  • Gnu » Cpio » Version: 2.5.90
    cpe:2.3:a:gnu:cpio:2.5.90
  • Gnu » Cpio » Version: 2.6
    cpe:2.3:a:gnu:cpio:2.6
  • Gnu » Cpio » Version: 2.7
    cpe:2.3:a:gnu:cpio:2.7
  • Gnu » Cpio » Version: 2.8
    cpe:2.3:a:gnu:cpio:2.8
  • Gnu » Cpio » Version: 2.9
    cpe:2.3:a:gnu:cpio:2.9
  • Opensuse » Opensuse » Version: 2007.05.10
    cpe:2.3:o:opensuse:opensuse:2007.05.10
  • Opensuse » Opensuse » Version: 2010.07.28
    cpe:2.3:o:opensuse:opensuse:2010.07.28


Contact Us

Shodan ® - All rights reserved