CVE-2002-0760

UNKNOWN

Race condition in bzip2 before 1

Published Apr 2, 2003

Modified 1 years ago

Details

Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions before setting the permissions to what is specified in the bzip2 archive, which could allow local users to read the files as they are being decompressed.

References

ADVISORY

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-039.0.txt

ADVISORY

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:25.bzip2.asc

WEB

http://www.iss.net/security_center/static/9127.php

WEB

http://www.securityfocus.com/bid/4775

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2002-0760

CVSS Analysis