CVEvulnerability

CVE-2002-0761

2.1 LOW Published 2002-08-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-08-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N

Description

bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual files when creating an archive, which could cause the files to be extracted with less restrictive permissions than intended.

Affected configurations

• bzip bzip2 0.9.0 • bzip bzip2 0.9.0a • bzip bzip2 0.9.0b • bzip bzip2 0.9.0c • bzip bzip2 0.9.5a • bzip bzip2 0.9.5b • bzip bzip2 0.9.5c • bzip bzip2 0.9.5d • bzip bzip2 1.0 • bzip bzip2 1.0.1

References