← Database

CVE-2005-0988

LOW CVSS: 3.7 Published: 2005-05-02 Modified: 2026-06-16

Description

Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.

Affected Platforms

Gnu GzipGentoo LinuxFreebsd FreebsdRedhat Enterprise LinuxTurbolinux Turbolinux HomeRedhat Enterprise Linux DesktopTurbolinux Turbolinux DesktopRedhat Linux Advanced WorkstationTrustix Secure LinuxUbuntu Ubuntu Linux

Weakness Type

NVD-CWE-Other

References