Published: 02/05/2005 Updated: 11/10/2017

CVSS v2 Base Score: 3.7 | Impact Score: 6.4 | Exploitability Score: 1.9

VMScore: 329

Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P

Race condition in gzip 1.2.4, 1.3.3, and previous versions, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu gzip 1.3.3
gnu gzip 1.2.4
gnu gzip 1.2.4a
freebsd freebsd 4.3
redhat enterprise linux 2.1
freebsd freebsd 4.1.1
freebsd freebsd 4.6
freebsd freebsd 5.4
freebsd freebsd 5.3
redhat enterprise linux 4.0
trustix secure linux 2.0
redhat enterprise linux desktop 3.0
freebsd freebsd 5.1
ubuntu ubuntu linux 4.1
redhat linux advanced workstation 2.1
freebsd freebsd 4.4
redhat enterprise linux 3.0
freebsd freebsd 4.8
turbolinux turbolinux appliance server 1.0 workgroup
freebsd freebsd 4.7
freebsd freebsd 5.2.1
freebsd freebsd 5.0
turbolinux turbolinux server 7.0
freebsd freebsd 4.5
ubuntu ubuntu linux 5.04
freebsd freebsd 4.10
freebsd freebsd 4.2
freebsd freebsd 4.11
freebsd freebsd 4.1
turbolinux turbolinux workstation 7.0
freebsd freebsd 4.9
freebsd freebsd 5.2
turbolinux turbolinux home
turbolinux turbolinux workstation 8.0
freebsd freebsd 4.0
turbolinux turbolinux appliance server 1.0 hosting
trustix secure linux 2.1
redhat enterprise linux desktop 4.0
trustix secure linux 2.2
turbolinux turbolinux server 8.0
turbolinux turbolinux server 10.0
gentoo linux
turbolinux turbolinux desktop 10.0
freebsd freebsd 4.6.2

Synopsis gzip security update Type/Severity Security Advisory: Low Topic An updated gzip package is now availableThis update has been rated as having low security impact by the Red HatSecurity Response Team Description The gzip package contains the GNU gzip data compression programA bug ...

Imran Ghory discovered a race condition in the file permission restore code of gzip and gunzip While a user was compressing or decompressing a file, a local attacker with write permissions in the directory of that file could replace the target file with a hard link This would cause gzip to restore the file permissions to the hard link target ins ...

NVD-CWE-Other http://www.securityfocus.com/archive/1/394965 http://www.securityfocus.com/bid/12996 http://www.debian.org/security/2005/dsa-752 ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt http://secunia.com/advisories/18100 http://rhn.redhat.com/errata/RHSA-2005-357.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1 http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html http://secunia.com/advisories/21253 http://www.osvdb.org/15487 http://www.securityfocus.com/bid/19289 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852 http://secunia.com/advisories/22033 http://www.us-cert.gov/cas/techalerts/TA06-214A.html http://www.vupen.com/english/advisories/2006/3101 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A765 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1169 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10242 https://access.redhat.com/errata/RHSA-2005:357 https://nvd.nist.gov https://usn.ubuntu.com/116-1/

CVE-2005-0988

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect