PT-2002-1782 · Bzip2 · Bzip2

Published 2002-08-12 · Updated 2008-09-05 · CVE-2002-0761

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions bzip2 versions prior to 1.0.2

Description The issue allows the extraction of files with less restrictive permissions than intended due to the use of symbolic link permissions instead of the actual file permissions when creating an archive.

Recommendations For versions prior to 1.0.2, update to version 1.0.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2002-0761

Affected Products

Bzip2

References · 5

• http://securityfocus.com/bid/4776 · Vendor Advisory
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-039.0.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0761 · Security Note
• http://iss.net/security_center/static/9128.php · Vendor Advisory
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:25.bzip2.asc · Vendor Advisory