gzip prior to 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
oracle solaris 8 |
||
gnu gzip |