CVE-2002-0761
First published: Mon Aug 12 2002(Updated: )
bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual files when creating an archive, which could cause the files to be extracted with less restrictive permissions than intended.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| bzip2 | =1.0 | |
| bzip2 | =0.9.5d | |
| bzip2 | =0.9.0a | |
| bzip2 | =0.9.0 | |
| bzip2 | =0.9.5a | |
| bzip2 | =0.9.5b | |
| bzip2 | =0.9.0c | |
| bzip2 | =1.0.1 | |
| bzip2 | =0.9.5c | |
| bzip2 | =0.9.0b | |
| Bzip2 | =0.9.0 | |
| Bzip2 | =0.9.0a | |
| Bzip2 | =0.9.0b | |
| Bzip2 | =0.9.0c | |
| Bzip2 | =0.9.5a | |
| Bzip2 | =0.9.5b | |
| Bzip2 | =0.9.5c | |
| Bzip2 | =0.9.5d | |
| Bzip2 | =1.0 | |
| Bzip2 | =1.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2002-0761?
CVE-2002-0761 is considered a moderate severity vulnerability due to its potential impact on file permissions.
How do I fix CVE-2002-0761?
To fix CVE-2002-0761, upgrade bzip2 to version 1.0.2 or later.
What systems are affected by CVE-2002-0761?
CVE-2002-0761 affects bzip2 versions prior to 1.0.2 on FreeBSD 4.5 and older, and OpenLinux 3.1 and 3.1.1.
What types of vulnerabilities are present in CVE-2002-0761?
CVE-2002-0761 introduces vulnerabilities related to incorrect file permission handling through symbolic links during archive creation.
Is there a workaround for CVE-2002-0761?
There are no specific workarounds for CVE-2002-0761; the recommended action is to upgrade to a patched version of bzip2.
- agent/references
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/remedy
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/bzip
- canonical/bzip2
- version/bzip2/1.0
- version/bzip2/0.9.5d
- version/bzip2/0.9.0a
- version/bzip2/0.9.0
- version/bzip2/0.9.5a
- version/bzip2/0.9.5b
- version/bzip2/0.9.0c
- version/bzip2/1.0.1
- version/bzip2/0.9.5c
- version/bzip2/0.9.0b