A vulnerability has been reported in GNU Cpio, which can potentially be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error within the client implementation for the "rmt" (remote magtape) protocol, which can be exploited to cause a buffer overflow.

Successful exploitation may allow execution of arbitrary code, but requires that a user is tricked into connecting to a malicious "rmt" server.

Solution
Update to version 2.11.

Provided and/or discovered by
Jakob Lell, TU Berlin computer security working group (AGRS)

Original Advisory
GNU:
http://www.gnu.org/software/cpio/#TOCreleases

Jakob Lell:
http://www.agrs.tu-berlin.de/index.php?id=78327

Deep Links
Links available in Customer Area