Lucene search

K
ubuntucveUbuntu.comUB:CVE-2005-0988
HistoryMay 02, 2005 - 12:00 a.m.

CVE-2005-0988

2005-05-0200:00:00
ubuntu.com
ubuntu.com
8

3.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

47.7%

Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a
gzipped file, allows local users to modify permissions of arbitrary files
via a hard link attack on a file while it is being decompressed, whose
permissions are changed by gzip after the decompression is complete.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchgzip< 1.3.5-12ubuntu0.1UNKNOWN
ubuntu6.10noarchgzip< 1.3.5-14ubuntu1UNKNOWN
ubuntu7.04noarchgzip< 1.3.5-14ubuntu1UNKNOWN

3.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

47.7%