CVE-2015-1197
cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.
Published Feb 19, 2015 · updated Oct 15, 2026 · gnu cpio
cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.
Timeline
Detection, updates, and resolution for this record.
Feb 19, 2015 · NIST NVD
Detected
cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.
Oct 14, 2026 · NIST NVD
Updated
cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.
Oct 15, 2026 · OSV.dev
Fix available
cpio fixed in 2.11+dfsg-4.1; cpio fixed in 2.11+dfsg-4.1; cpio fixed in 2.11+dfsg-4.1
Oct 15, 2026 · OSV.dev
Fix available
cpio fixed in 2.11+dfsg-4.1
Oct 15, 2026 · OSV.dev
Updated
cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.
Affected
- Debian:12 cpio0 → 2.11+dfsg-4.1
- Debian:13 cpio0 → 2.11+dfsg-4.1
- Debian:14 cpio0 → 2.11+dfsg-4.1
- cpe gnu/cpio2.11
Sources
- CVE.orgCVE-2015-1197
Official CVE identifier
cve.org - FIRST EPSSCVE-2015-1197
30-day exploitation probability 2.9%
first.org - Metasploit Modulesexploit_linux/http/zimbra_cpio_cve_2022_41352
Public module reference (excellent). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2015-1197
cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.
nvd.nist.gov - OSV.devDEBIAN-CVE-2015-1197osv.dev
- Packet Storm Securityhttp://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.html
Packet Storm link already published on the finding.
packetstormsecurity.com