Secunia Logo
 
CVE Reference: CVE-2005-2475
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2005-2475

Description:
Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.

CVE Status:
Candidate

References:

UBUNTU
  http://www.ubuntu.com/usn/usn-191-1

TRUSTIX
  http://www.trustix.org/errata/2005/0053/

SREASON
  http://securityreason.com/securityalert/32

SCO

SAID
  Secunia Advisory: SA17653
  Secunia Advisory: SA17045
  Secunia Advisory: SA16309
  Secunia Advisory: SA17342
  Secunia Advisory: SA16985
  Secunia Advisory: SA17006
  Secunia Advisory: SA25098

REDHAT
  http://www.redhat.com/support/errata/RHSA-2007-0203.html

OSVDB
  18530

MANDRIVA
  http://frontal2.mandriva.com/security/advisories?name=MDKSA-2005:197

DEBIAN
  http://www.debian.org/security/2005/dsa-903

BUGTRAQ
  http://marc.theaimsgroup.com/?l=bugtraq&m=112300046224117&w=2

BID
  14450


Return to the previous page.