PT-2005-2012 · Gnu+1 · Gzip+1

Imran Ghory · Publicado 2005-04-06 · Atualizado 2017-10-11 · CVE-2005-0988

Positive Technologies (AI Summary)

CVSS v2.0

3.7

Baixa

Vetor base

AV:L/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions gzip versions 1.2.4 and earlier, 1.3.3 and earlier

Description A race condition exists when decompressing a gzipped file, allowing local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed. This occurs because gzip changes the permissions of the file after decompression is complete.

Recommendations For gzip versions 1.2.4 and earlier, and 1.3.3 and earlier, consider updating to a newer version that addresses this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-0988

DSA-752-1

RHSA-2005:357

RHSA-2005_357

Produtos afetados

Red Hat

Gzip

Referências · 26

• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0988 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-0988 · Aviso do Fabricante
• http://secunia.com/advisories/21253 · Nota
• https://redhat.com/security/data/cve/CVE-2005-0758.html · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A765 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10242 · Nota
• https://osv.dev/vulnerability/CVE-2005-0988 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2005-357.html · Aviso do Fabricante
• https://rhn.redhat.com/errata/RHSA-2005-357.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0988 · Nota de Segurança
• http://securityfocus.com/bid/19289 · Nota
• https://redhat.com/security/data/cve/CVE-2005-0988.html · Nota
• http://debian.org/security/2005/dsa-752 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/3101 · Nota