Race condition in bzip2 1.0.2 and previous versions allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
bzip bzip2 0.9.5_d |
||
bzip bzip2 0.9_a |
||
bzip bzip2 0.9 |
||
bzip bzip2 0.9.5_a |
||
bzip bzip2 1.0 |
||
bzip bzip2 1.0.1 |
||
bzip bzip2 1.0.2 |
||
bzip bzip2 0.9.5_b |
||
bzip bzip2 0.9.5_c |
||
bzip bzip2 0.9_b |
||
bzip bzip2 0.9_c |