Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

bzip bzip2 0.9.5a vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2002-0759
bzip2 prior to 1.0.2 in FreeBSD 4.5 and previous versions, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not use the O_EXCL flag to create files during decompression and does not warn the user if an existing file would be overwritten, which could allow malic...
Bzip Bzip2 0.9.5cBzip Bzip2 1.0Bzip Bzip2 0.9.0aBzip Bzip2 0.9.0bBzip Bzip2 0.9.0cBzip Bzip2 0.9.5aBzip Bzip2 0.9.5bBzip Bzip2 0.9.0Bzip Bzip2 0.9.5dBzip Bzip2 1.0.1
1.2
CVSSv2
CVE-2002-0760
Race condition in bzip2 prior to 1.0.2 in FreeBSD 4.5 and previous versions, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions before setting the permissions to what is specified in the bzip2 archive, which could all...
Bzip Bzip2 0.9.0Bzip Bzip2 0.9.0aBzip Bzip2 0.9.0bBzip Bzip2 0.9.5aBzip Bzip2 0.9.5cBzip Bzip2 0.9.5dBzip Bzip2 1.0Bzip Bzip2 1.0.1Bzip Bzip2 0.9.0cBzip Bzip2 0.9.5b
2.1
CVSSv2
CVE-2002-0761
bzip2 prior to 1.0.2 in FreeBSD 4.5 and previous versions, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual files when creating an archive, which could cause the files to be extracted with less restrictive permissions tha...
Bzip Bzip2 0.9.5aBzip Bzip2 0.9.5bBzip Bzip2 0.9.5cBzip Bzip2 0.9.5dBzip Bzip2 1.0Bzip Bzip2 0.9.0Bzip Bzip2 0.9.0bBzip Bzip2 1.0.1Bzip Bzip2 0.9.0aBzip Bzip2 0.9.0c
4.3
CVSSv2
CVE-2008-1372
bzlib.c in bzip2 prior to 1.0.5 allows user-assisted remote malicious users to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats.
Bzip Bzip2 0.9Bzip Bzip2 0.9.5aBzip Bzip2 1.0Bzip Bzip2 1.0.1Bzip Bzip2 1.0.2Bzip Bzip2 0.9 BBzip Bzip2 0.9 CBzip Bzip2 0.9.5dBzip Bzip2 0.9 ABzip Bzip2 0.9.5bBzip Bzip2 0.9.5cBzip Bzip2 1.0.3
5.1
CVSSv2
CVE-2010-0405
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 prior to 1.0.6 allows context-dependent malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.
Bzip Bzip2 1.0Bzip Bzip2 0.9.5 ABzip Bzip2 0.9.5 DBzip Bzip2 0.9.5 CBzip Bzip2 0.9 ABzip Bzip2 0.9.5dBzip Bzip2 0.9.0aBzip Bzip2 0.9.0Bzip Bzip2 0.9 CBzip Bzip2 1.0.3Bzip Bzip2 1.0.2Bzip Bzip2 0.9.5aBzip Bzip2 0.9.5bLibzip2 Libzip2Bzip Bzip2 0.9.0cBzip Bzip2 0.9Bzip Bzip2 1.0.1Bzip Bzip2 0.9.5cBzip Bzip2 0.9 BBzip Bzip2 0.9.5 BBzip Bzip2 1.0.4Bzip Bzip2 0.9.0b
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook