CVEvulnerability

CVE-2005-0953

3.7 LOW Published 2005-05-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-05-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.7 LOW — AV:L/AC:H/Au:N/C:P/I:P/A:P

Description

Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.

Affected configurations

• bzip bzip2 0.9 • bzip bzip2 0.9.5 a • bzip bzip2 0.9.5 b • bzip bzip2 0.9.5 c • bzip bzip2 0.9.5 d • bzip bzip2 0.9 a • bzip bzip2 0.9 b • bzip bzip2 0.9 c • bzip bzip2 1.0 • bzip bzip2 1.0.1 • bzip bzip2 1.0.2

References