CVE-1999-1572

Summary

CVE-1999-1572 is a vulnerability affecting the cpio utility in FreeBSD 2.1.0 and Debian GNU/Linux 3.0, among possibly other operating systems. When using the -O (archive) or -F options, cpio fails to apply an appropriate umask, resulting in newly created files being assigned mode 0666. This weakness enables local users to read or overwrite these files, posing a potential security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.