NVD

Id
66737  
Name
CVE-2005-0988  
Description
Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.  
Reject
 
CVSS Version
2  
CVSS Score
3.7  
Severity
Low  
CVSS Base Score
3.7  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-05-02  
Modified Date
2011-03-07  
Seq
2005-0988  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
346773 66737 CVE-2005-0988 SCOSA-2005.58  View
346774 66737 CVE-2005-0988 APPLE-SA-2006-08-01  View
346775 66737 CVE-2005-0988 oval:org.mitre.oval:def:10242  View
346776 66737 CVE-2005-0988 oval:org.mitre.oval:def:1169  View
346777 66737 CVE-2005-0988 oval:org.mitre.oval:def:765  View
346778 66737 CVE-2005-0988 RHSA-2005:357  View
346779 66737 CVE-2005-0988 SSA:2006-262  View
346780 66737 CVE-2005-0988 101816  View
346781 66737 CVE-2005-0988 DSA-752  View
346782 66737 CVE-2005-0988 20050404 gzip TOCTOU file-permissions vulnerability  View
346783 66737 CVE-2005-0988 12996  View
346784 66737 CVE-2005-0988 19289  View
346785 66737 CVE-2005-0988 TA06-214A  View
346786 66737 CVE-2005-0988 ADV-2006-3101  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62027 JVNDB-2005-000229 gzip の gunzip における競合状態の脆弱性 ------------ CVE-2005-0988 12192 CVE-2005-0988 66737 3.7 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000229.html 2005-04-05 2007-04-01 View