Launchpad.net

CVE 2005-1229

Directory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to arbitrary directories via a .. (dot dot) in a cpio file.

See the CVE page on Mitre.org for more details.