pentagrid, 9 months ago Today we published an advisory for Busybox cpio. When extracting cpio archives with BusyBox cpio, the cpio archiving tools may write files outside the destination directory and there is no option to prevent this. Full advisory: https://www.pentagrid.ch/en/blog/busybox-cpio-directory-traversal-vulnerability #itsecurity #infosec #pentesting #Busybox
Today we published an advisory for Busybox cpio. When extracting cpio archives with BusyBox cpio, the cpio archiving tools may write files outside the destination directory and there is no option to prevent this.
Full advisory: https://www.pentagrid.ch/en/blog/busybox-cpio-directory-traversal-vulnerability
#itsecurity #infosec #pentesting #Busybox
