← Back

CVE-2005-0988

nvd nist
Published: May 2, 2005Modified: Apr 16, 2026

JSON object

Loading...
3.7
Vector
AV:L/AC:H/Au:N/C:P/I:P/A:P
Exploitability: 1.9 / Impact: 6.4
Source: NVD

Description

Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.

Affected (104)

Products: Gnu: Gzip · Freebsd: Freebsd · Gentoo: Linux · +4 more
Show all products
Gnu: Gzip · Freebsd: Freebsd · Gentoo: Linux · Redhat: Enterprise Linux, Enterprise Linux Desktop, Linux Advanced Workstation · Trustix: Secure Linux · Turbolinux: Turbolinux Appliance Server, Turbolinux Desktop, Turbolinux Home, Turbolinux Server, Turbolinux Workstation · Ubuntu: Ubuntu Linux
Gnu
1 product
Gzip
Freebsd
1 product
Freebsd
Gentoo
1 product
Linux
Redhat
3 products
Enterprise Linux
Enterprise Linux Desktop
Linux Advanced Workstation
Trustix
1 product
Secure Linux
Turbolinux
5 products
Turbolinux Appliance Server
Turbolinux Desktop
Turbolinux Home
Turbolinux Server
Turbolinux Workstation
Ubuntu
1 product
Ubuntu Linux
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Gnu
Gzip
Version 1.2.4
Gzip
Version 1.2.4a
Gzip
Version 1.3.3
Configuration B
101 vulnerable
Vulnerable SoftwareAffected Versions
Freebsd
Freebsd
Version 4.0
Freebsd
Version 4.0 alpha
Freebsd
Version 4.0 releng
Freebsd
Version 4.1.1
Freebsd
Version 4.1.1 release
Freebsd
Version 4.1.1 stable
Freebsd
Version 4.10
Freebsd
Version 4.10 release
Freebsd
Version 4.10 release_p8
Freebsd
Version 4.10 releng
Freebsd
Version 4.11 release_p3
Freebsd
Version 4.11 releng
Freebsd
Version 4.11 stable
Freebsd
Version 4.1
Freebsd
Version 4.2
Freebsd
Version 4.2 stable
Freebsd
Version 4.3
Freebsd
Version 4.3 release
Freebsd
Version 4.3 release_p38
Freebsd
Version 4.3 releng
Freebsd
Version 4.3 stable
Freebsd
Version 4.4
Freebsd
Version 4.4 release_p42
Freebsd
Version 4.4 releng
Freebsd
Version 4.4 stable
Freebsd
Version 4.5
Freebsd
Version 4.5 release
Freebsd
Version 4.5 release_p32
Freebsd
Version 4.5 releng
Freebsd
Version 4.5 stable
Freebsd
Version 4.6.2
Freebsd
Version 4.6
Freebsd
Version 4.6 release
Freebsd
Version 4.6 release_p20
Freebsd
Version 4.6 releng
Freebsd
Version 4.6 stable
Freebsd
Version 4.7
Freebsd
Version 4.7 release
Freebsd
Version 4.7 release_p17
Freebsd
Version 4.7 releng
Freebsd
Version 4.7 stable
Freebsd
Version 4.8
Freebsd
Version 4.8 pre-release
Freebsd
Version 4.8 release_p6
Freebsd
Version 4.8 releng
Freebsd
Version 4.9
Freebsd
Version 4.9 pre-release
Freebsd
Version 4.9 releng
Freebsd
Version 5.0
Freebsd
Version 5.0 alpha
Freebsd
Version 5.0 release_p14
Freebsd
Version 5.0 releng
Freebsd
Version 5.1
Freebsd
Version 5.1 alpha
Freebsd
Version 5.1 release
Freebsd
Version 5.1 release_p5
Freebsd
Version 5.1 releng
Freebsd
Version 5.2.1 release
Freebsd
Version 5.2.1 releng
Freebsd
Version 5.2
Freebsd
Version 5.3
Freebsd
Version 5.3 release
Freebsd
Version 5.3 releng
Freebsd
Version 5.3 stable
Freebsd
Version 5.4 pre-release
Freebsd
Version 5.4 release
Freebsd
Version 5.4 releng
Linux
All versions
Redhat
Enterprise Linux
Version 2.1
Enterprise Linux
Version 2.1
Enterprise Linux
Version 2.1
Enterprise Linux
Version 2.1
Enterprise Linux
Version 2.1
Enterprise Linux
Version 2.1
Enterprise Linux
Version 3.0
Enterprise Linux
Version 3.0
Enterprise Linux
Version 3.0
Enterprise Linux
Version 4.0
Enterprise Linux
Version 4.0
Enterprise Linux
Version 4.0
Redhat
Enterprise Linux Desktop
Version 3.0
Enterprise Linux Desktop
Version 4.0
Redhat
Linux Advanced Workstation
Version 2.1
Linux Advanced Workstation
Version 2.1
Trustix
Secure Linux
Version 2.0
Secure Linux
Version 2.1
Secure Linux
Version 2.2
Turbolinux
Turbolinux Appliance Server
Version 1.0_hosting
Turbolinux Appliance Server
Version 1.0_workgroup
Turbolinux Desktop
Version 10.0
Turbolinux Home
All versions
Turbolinux
Turbolinux Server
Version 10.0
Turbolinux Server
Version 7.0
Turbolinux Server
Version 8.0
Turbolinux
Turbolinux Workstation
Version 7.0
Turbolinux Workstation
Version 8.0
Ubuntu
Ubuntu Linux
Version 4.1
Ubuntu Linux
Version 4.1
Ubuntu Linux
Version 5.04
Ubuntu Linux
Version 5.04
Ubuntu Linux
Version 5.04

References (36)

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt (unsafe URL)
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.