PT-2005-2012 · Gnu+1 · Gzip+1

Imran Ghory · Published 2005-04-06 · Updated 2017-10-11 · CVE-2005-0988

Positive Technologies (AI Summary)

CVSS v2.0

3.7

Low

Base vector

AV:L/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions gzip versions 1.2.4 and earlier, 1.3.3 and earlier

Description A race condition exists when decompressing a gzipped file, allowing local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed. This occurs because gzip changes the permissions of the file after decompression is complete.

Recommendations For gzip versions 1.2.4 and earlier, and 1.3.3 and earlier, consider updating to a newer version that addresses this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-0988

DSA-752-1

RHSA-2005:357

RHSA-2005_357

Affected Products

Red Hat

Gzip

References · 26

• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0988 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-0988 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-0988 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2005-357.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0988 · Security Note
• http://debian.org/security/2005/dsa-752 · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852 · Vendor Advisory
• http://securityfocus.com/bid/12996 · Patch
• http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html · Vendor Advisory
• ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt · Vendor Advisory
• http://securityfocus.com/archive/1/394965 · Vendor Advisory
• http://secunia.com/advisories/21253 · Note
• https://redhat.com/security/data/cve/CVE-2005-0758.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A765 · Note