Mandriva Linux Security Advisory – Buffer overflow in the safer_name_suffix function in GNU cpio has unspecified attack vectors and impact, resulting in a crashing stack. This problem is originally found in tar, but affects cpio too, due to similar code fragments. Directory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to arbitrary directories via a .. (dot dot) in a cpio file. This is an old issue, affecting only Mandriva Corporate Server 4 and Mandriva Linux 2007.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/61346/MDKSA-2007-233.txt
Source: https://packetstormsecurity.com/files/61346/Mandriva-Linux-Security-Advisory-2007.233.html