pentagrid, 9 months ago Today we published an advisory for Busybox cpio. When extracting cpio archives with BusyBox cpio, the cpio archiving tools may write files outside the destination directory and there is no option to prevent this. Full advisory: https://www.pentagrid.ch/en/blog/busybox-cpio-directory-traversal-vulnerability #itsecurity #infosec #pentesting #Busybox
Today we published an advisory for Busybox cpio. When extracting cpio archives with BusyBox cpio, the cpio archiving tools may write files outside the destination directory and there is no option to prevent this.
Full advisory: https://www.pentagrid.ch/en/blog/busybox-cpio-directory-traversal-vulnerability
#itsecurity #infosec #pentesting #Busybox
ljrk, 9 months ago @pentagrid Ah, busybox, a sure-fire source of old-school bugs :3
@pentagrid Ah, busybox, a sure-fire source of old-school bugs :3
Add comment