NetSight
IP …
low3.7

CVE-2005-0988

Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard lin…

Impact

Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.

Affected products

VendorProductAffected versions
GnuGzip
Versions 1.2.4, 1.2.4a, 1.3.3
FreebsdFreebsd
Versions 4.0, 4.1, 4.1.1, 4.2, 4.3, 4.4
GentooLinux
All versions
RedhatEnterprise Linux
Versions 2.1, 3.0, 4.0
RedhatEnterprise Linux Desktop
Versions 3.0, 4.0
RedhatLinux Advanced Workstation
Version 2.1
TrustixSecure Linux
Versions 2.0, 2.1, 2.2
TurbolinuxTurbolinux Appliance Server
Versions 1.0_hosting, 1.0_workgroup
TurbolinuxTurbolinux Desktop
Version 10.0
TurbolinuxTurbolinux Home
All versions
TurbolinuxTurbolinux Server
Versions 7.0, 8.0, 10.0
TurbolinuxTurbolinux Workstation
Versions 7.0, 8.0

References