Description

MandrakeSoft has issued an update for cpio. This fixes a vulnerability, which can be exploited by malicious, local users to disclose and manipulate information.

The problem is that output files are created with insecure permissions, which makes it possible for other users to read and manipulate the contents.

Solution
Apply updated packages.
Further details available to Secunia VIM customers

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2005:032

Deep Links
Links available to Secunia VIM customers