CVE-2005-0988

Fixed in a distro release EPSS <1%

Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.

Published 2005-04-06 · CVE record · OSV

Products: gnu gzip, freebsd, gentoo linux, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat linux_advanced_workstation, trustix secure_linux, turbolinux_appliance_server, turbolinux_desktop, turbolinux_home, turbolinux_server, turbolinux_workstation, ubuntu_linux

Distro releases