CVE-2002-0761

Published: Aug 12, 2002Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual files when creating an archive, which could cause the files to be extracted with less restrictive permissions than intended.

Affected (10)

Products: Bzip: Bzip2

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Bzip Bzip2	Version 0.9.0
Bzip Bzip2	Version 0.9.0a
Bzip Bzip2	Version 0.9.0b
Bzip Bzip2	Version 0.9.0c
Bzip Bzip2	Version 0.9.5a
Bzip Bzip2	Version 0.9.5b
Bzip Bzip2	Version 0.9.5c
Bzip Bzip2	Version 0.9.5d
Bzip Bzip2	Version 1.0.1
Bzip Bzip2	Version 1.0

References (8)

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-039.0.txt (unsafe URL)

Source: cve@mitre.org

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:25.bzip2.asc (unsafe URL)

Source: cve@mitre.org

PatchVendor Advisory

http://www.iss.net/security_center/static/9128.php

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/4776

Source: cve@mitre.org

PatchVendor Advisory

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-039.0.txt (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:25.bzip2.asc (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.iss.net/security_center/static/9128.php

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/4776

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.