CVE-2005-0953

Synopsis bzip2 security update Type/Severity Security Advisory: Low Topic Updated bzip2 packages that fix multiple issues are now availableThis update has been rated as having low security impact by the Red HatSecurity Response Team[Updated 13 February 2006]Replacement bzip2 packages for Red Hat Enterpris ...

Imran Ghory discovered a race condition in the file permission restore code of bunzip2 While a user was decompressing a file, a local attacker with write permissions in the directory of that file could replace the target file with a hard link This would cause bzip2 to restore the file permissions to the hard link target instead of to the bzip2 ou ...

Imran Ghory discovered a race condition in bzip2, a high-quality block-sorting file compressor and decompressor When decompressing a file in a directory an attacker has access to, bunzip2 could be tricked to set the file permissions to a different file the user has permissions to For the stable distribution (woody) this problem has been fixed in ...