CVE-2005-0988

Description

Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.

3.7

CVSS

Severity: Low

CVSS 2.0 •

EPSS 0.11%

Vendor Advisory apple.com Vendor Advisory debian.org Vendor Advisory sun.com Vendor Advisory redhat.com Vendor Advisory sco.com Vendor Advisory slackware.com Vendor Advisory securityfocus.com

Affected: n/a n/a

References

Link	Tags
http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html	vendor advisory
http://secunia.com/advisories/22033	third party advisory
http://www.vupen.com/english/advisories/2006/3101	vdb entry
http://secunia.com/advisories/21253	third party advisory
http://www.debian.org/security/2005/dsa-752	vendor advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1	vendor advisory
http://rhn.redhat.com/errata/RHSA-2005-357.html	vendor advisory
http://www.securityfocus.com/bid/19289	vdb entry
http://www.us-cert.gov/cas/techalerts/TA06-214A.html	third party advisory us government resource
http://www.securityfocus.com/bid/12996	patch vdb entry
http://www.osvdb.org/15487	vdb entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A765	signature vdb entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10242	signature vdb entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1169	signature vdb entry
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt	vendor advisory
http://secunia.com/advisories/18100	third party advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852	vendor advisory
http://www.securityfocus.com/archive/1/394965	vendor advisory mailing list

Frequently Asked Questions

What is the severity of CVE-2005-0988?: CVE-2005-0988 has been scored as a low severity vulnerability.
How to fix CVE-2005-0988?: To fix CVE-2005-0988, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2005-0988 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2005-0988 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.