CVE-2005-0953
Fixed in a distro release EPSS <1%
Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.
Products: bzip2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | bzip2 | 1.0.2-6 |
| Debian 13 | bzip2 | 1.0.2-6 |
| Debian 14 | bzip2 | 1.0.2-6 |
| Debian 3.0 | bzip2 | 1.0.2-1.woody2 |
| Red Hat Enterprise Linux 3 | bzip2 | 0:1.0.2-11.EL3.4 |
| Red Hat Enterprise Linux 3 | bzip2-debuginfo | 0:1.0.2-11.EL3.4 |
| Red Hat Enterprise Linux 3 | bzip2-devel | 0:1.0.2-11.EL3.4 |
| Red Hat Enterprise Linux 3 | bzip2-libs | 0:1.0.2-11.EL3.4 |
| Red Hat Enterprise Linux 4 | bzip2 | 0:1.0.2-13.EL4.3 |
| Red Hat Enterprise Linux 4 | bzip2-debuginfo | 0:1.0.2-13.EL4.3 |
| Red Hat Enterprise Linux 4 | bzip2-devel | 0:1.0.2-13.EL4.3 |
| Red Hat Enterprise Linux 4 | bzip2-libs | 0:1.0.2-13.EL4.3 |