Published: 02/05/2005 Updated: 11/10/2017

CVSS v2 Base Score: 3.7 | Impact Score: 6.4 | Exploitability Score: 1.9

VMScore: 329

Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P

Race condition in gzip 1.2.4, 1.3.3, and previous versions, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu gzip 1.2.4
gnu gzip 1.2.4a
gnu gzip 1.3.3
freebsd freebsd 4.1.1
freebsd freebsd 4.11
freebsd freebsd 4.4
freebsd freebsd 4.5
freebsd freebsd 4.6
freebsd freebsd 4.7
freebsd freebsd 4.9
freebsd freebsd 5.1
freebsd freebsd 5.3
redhat enterprise linux 2.1
redhat enterprise linux 4.0
redhat enterprise linux desktop 3.0
turbolinux turbolinux appliance server 1.0_hosting
turbolinux turbolinux appliance server 1.0_workgroup
ubuntu ubuntu linux 4.1
freebsd freebsd 4.0
freebsd freebsd 4.10
freebsd freebsd 4.3
freebsd freebsd 4.8
freebsd freebsd 5.0
freebsd freebsd 5.2.1
freebsd freebsd 5.4
gentoo linux
redhat enterprise linux 3.0
redhat linux advanced workstation 2.1
trustix secure linux 2.0
turbolinux turbolinux server 7.0
turbolinux turbolinux server 8.0
ubuntu ubuntu linux 5.04
freebsd freebsd 4.1
trustix secure linux 2.1
trustix secure linux 2.2
turbolinux turbolinux workstation 7.0
turbolinux turbolinux workstation 8.0
freebsd freebsd 4.2
freebsd freebsd 4.6.2
freebsd freebsd 5.2
redhat enterprise linux desktop 4.0
turbolinux turbolinux desktop 10.0
turbolinux turbolinux home
turbolinux turbolinux server 10.0

Synopsis gzip security update Type/Severity Security Advisory: Low Topic An updated gzip package is now availableThis update has been rated as having low security impact by the Red HatSecurity Response Team Description The gzip package contains the GNU gzip data compression programA bug ...

Imran Ghory discovered a race condition in the file permission restore code of gzip and gunzip While a user was compressing or decompressing a file, a local attacker with write permissions in the directory of that file could replace the target file with a hard link This would cause gzip to restore the file permissions to the hard link target ins ...

NVD-CWE-Other http://www.securityfocus.com/archive/1/394965 http://www.securityfocus.com/bid/12996 http://www.debian.org/security/2005/dsa-752 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt http://secunia.com/advisories/18100 http://rhn.redhat.com/errata/RHSA-2005-357.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1 http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html http://secunia.com/advisories/21253 http://www.osvdb.org/15487 http://www.securityfocus.com/bid/19289 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852 http://secunia.com/advisories/22033 http://www.us-cert.gov/cas/techalerts/TA06-214A.html http://www.vupen.com/english/advisories/2006/3101 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A765 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1169 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10242 https://access.redhat.com/errata/RHSA-2005:357 https://usn.ubuntu.com/116-1/https://nvd.nist.gov

CVE-2005-0988

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect