CVE-2005-0953 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2005-0953
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-0953

Description: Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/19926 SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-66-200191-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103118-1 SGI SAID Secunia Advisory: SA19183 Secunia Advisory: SA27274 Secunia Advisory: SA27643 Secunia Advisory: SA29940 REDHAT http://www.redhat.com/support/errata/RHSA-2005-474.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1154 OPENPKG http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.002.html NETBSD MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2006:026 FEDORA http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html DEBIAN http://www.debian.org/security/2005/dsa-730 CONFIRM http://docs.info.apple.com/article.html?artnum=307041 CERT http://www.us-cert.gov/cas/techalerts/TA07-319A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/456430/30/8730/threaded http://marc.theaimsgroup.com/?l=bugtraq&m=111229375217633&w=2 BID 12954 26444 APPLE http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html

Return to the previous page.