NVD

Id
66702  
Name
CVE-2005-0953  
Description
Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.  
Reject
 
CVSS Version
2  
CVSS Score
3.7  
Severity
Low  
CVSS Base Score
3.7  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-05-02  
Modified Date
2017-07-10  
Seq
2005-0953  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
346636 66702 CVE-2005-0953 NetBSD-SA2008-004  View
346637 66702 CVE-2005-0953 20060301-01-U  View
346638 66702 CVE-2005-0953 http://docs.info.apple.com/article.html?artnum=307041  View
346639 66702 CVE-2005-0953 APPLE-SA-2007-11-14  View
346640 66702 CVE-2005-0953 20050330 bzip2 TOCTOU file-permissions vulnerability  View
346641 66702 CVE-2005-0953 oval:org.mitre.oval:def:10902  View
346642 66702 CVE-2005-0953 oval:org.mitre.oval:def:1154  View
346643 66702 CVE-2005-0953 103118  View
346644 66702 CVE-2005-0953 200191  View
346645 66702 CVE-2005-0953 DSA-730  View
346646 66702 CVE-2005-0953 FLSA:158801  View
346647 66702 CVE-2005-0953 MDKSA-2006:026  View
346648 66702 CVE-2005-0953 OpenPKG-SA-2007.002  View
346649 66702 CVE-2005-0953 RHSA-2005:474  View
346650 66702 CVE-2005-0953 20070109 rPSA-2007-0004-1 bzip2  View
346651 66702 CVE-2005-0953 12954  View
346652 66702 CVE-2005-0953 26444  View
346653 66702 CVE-2005-0953 TA07-319A  View
346654 66702 CVE-2005-0953 ADV-2007-3525  View
346655 66702 CVE-2005-0953 ADV-2007-3868  View
346656 66702 CVE-2005-0953 bzip2-toctou-symlink(19926)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62156 JVNDB-2005-000358 bzip2 の解凍処理における競合状態の脆弱性 bzip2 には、解凍処理におけるパーミッション復元コードの実装の不備のため、競合状態が発生する脆弱性が存在します。 CVE-2005-0953 12157 CVE-2005-0953 66702 3.7 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000358.html 2005-05-27 2015-05-22 View