First published: Mon Aug 12 2002(Updated: )
Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions before setting the permissions to what is specified in the bzip2 archive, which could allow local users to read the files as they are being decompressed.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Bzip Bzip2 | =1.0 | |
Bzip Bzip2 | =0.9.5d | |
Bzip Bzip2 | =0.9.0a | |
Bzip Bzip2 | =0.9.0 | |
Bzip Bzip2 | =0.9.5a | |
Bzip Bzip2 | =0.9.5b | |
Bzip Bzip2 | =0.9.0c | |
Bzip Bzip2 | =1.0.1 | |
Bzip Bzip2 | =0.9.5c | |
Bzip Bzip2 | =0.9.0b |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.