PT-2002-1782 · Bzip2 · Bzip2

Publicado 2002-08-12 · Atualizado 2008-09-05 · CVE-2002-0761

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions bzip2 versions prior to 1.0.2

Description The issue allows the extraction of files with less restrictive permissions than intended due to the use of symbolic link permissions instead of the actual file permissions when creating an archive.

Recommendations For versions prior to 1.0.2, update to version 1.0.2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2002-0761

Produtos afetados

Bzip2

Referências · 5

• http://securityfocus.com/bid/4776 · Aviso do Fabricante
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-039.0.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0761 · Nota de Segurança
• http://iss.net/security_center/static/9128.php · Aviso do Fabricante
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:25.bzip2.asc · Aviso do Fabricante