CVE

Id
12159  
CVE No.
CVE-2005-0953  
Status
Candidate  
Description
Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.  
Phase
Assigned (20050403)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
87084 12159 CVE-2005-0953 BUGTRAQ:20050330 bzip2 TOCTOU file-permissions vulnerability  View
87085 12159 CVE-2005-0953 URL:http://marc.info/?l=bugtraq&m=111229375217633&w=2  View
87086 12159 CVE-2005-0953 BUGTRAQ:20070109 rPSA-2007-0004-1 bzip2  View
87087 12159 CVE-2005-0953 URL:http://www.securityfocus.com/archive/1/archive/1/456430/30/8730/threaded  View
87088 12159 CVE-2005-0953 CONFIRM:http://docs.info.apple.com/article.html?artnum=307041  View
87089 12159 CVE-2005-0953 APPLE:APPLE-SA-2007-11-14  View
87090 12159 CVE-2005-0953 URL:http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html  View
87091 12159 CVE-2005-0953 DEBIAN:DSA-730  View
87092 12159 CVE-2005-0953 URL:http://www.debian.org/security/2005/dsa-730  View
87093 12159 CVE-2005-0953 FEDORA:FLSA:158801  View
87094 12159 CVE-2005-0953 URL:http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html  View
87095 12159 CVE-2005-0953 MANDRIVA:MDKSA-2006:026  View
87096 12159 CVE-2005-0953 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:026  View
87097 12159 CVE-2005-0953 NETBSD:NetBSD-SA2008-004  View
87098 12159 CVE-2005-0953 URL:ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-004.txt.asc  View
87099 12159 CVE-2005-0953 OPENPKG:OpenPKG-SA-2007.002  View
87100 12159 CVE-2005-0953 URL:http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.002.html  View
87101 12159 CVE-2005-0953 REDHAT:RHSA-2005:474  View
87102 12159 CVE-2005-0953 URL:http://www.redhat.com/support/errata/RHSA-2005-474.html  View
87103 12159 CVE-2005-0953 SGI:20060301-01-U  View
87104 12159 CVE-2005-0953 URL:ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc  View
87105 12159 CVE-2005-0953 SUNALERT:103118  View
87106 12159 CVE-2005-0953 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-103118-1  View
87107 12159 CVE-2005-0953 SUNALERT:200191  View
87108 12159 CVE-2005-0953 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-200191-1  View
87109 12159 CVE-2005-0953 CERT:TA07-319A  View
87110 12159 CVE-2005-0953 URL:http://www.us-cert.gov/cas/techalerts/TA07-319A.html  View
87111 12159 CVE-2005-0953 BID:12954  View
87112 12159 CVE-2005-0953 URL:http://www.securityfocus.com/bid/12954  View
87113 12159 CVE-2005-0953 BID:26444  View
87114 12159 CVE-2005-0953 URL:http://www.securityfocus.com/bid/26444  View
87115 12159 CVE-2005-0953 OVAL:oval:org.mitre.oval:def:10902  View
87116 12159 CVE-2005-0953 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10902  View
87117 12159 CVE-2005-0953 VUPEN:ADV-2007-3525  View
87118 12159 CVE-2005-0953 URL:http://www.vupen.com/english/advisories/2007/3525  View
87119 12159 CVE-2005-0953 VUPEN:ADV-2007-3868  View
87120 12159 CVE-2005-0953 URL:http://www.vupen.com/english/advisories/2007/3868  View
87121 12159 CVE-2005-0953 OVAL:oval:org.mitre.oval:def:1154  View
87122 12159 CVE-2005-0953 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1154  View
87123 12159 CVE-2005-0953 SECUNIA:19183  View
87124 12159 CVE-2005-0953 URL:http://secunia.com/advisories/19183  View
87125 12159 CVE-2005-0953 SECUNIA:27274  View
87126 12159 CVE-2005-0953 URL:http://secunia.com/advisories/27274  View
87127 12159 CVE-2005-0953 SECUNIA:27643  View
87128 12159 CVE-2005-0953 URL:http://secunia.com/advisories/27643  View
87129 12159 CVE-2005-0953 SECUNIA:29940  View
87130 12159 CVE-2005-0953 URL:http://secunia.com/advisories/29940  View
87131 12159 CVE-2005-0953 XF:bzip2-toctou-symlink(19926)  View

Related JVN