ISOMAN

CVE

CVE-2005-0988

Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.

Severity
LOW
CVSS
3.7
Published
Modified

Linked Releases

DistributionReleaseStatusEvidence
Gentoo2026.05.31 amd64 minimal installunknownsource
Gentoo2026.05.10 amd64 liveguiunknownsource
Gentoo2026.06.07 arm64 minimal installunknownsource
Gentoo2026.05.05 x86 minimal installunknownsource
Gentoo2026.06.11 powerpc minimal installunknownsource
Gentoo2026.06.11 powerpc minimal-dist installunknownsource
Gentoo2026.05.27 ppc64le minimal installunknownsource
Gentoo2026.05.27 sparc64 minimal installunknownsource
Gentoo2026.05.27 sparc64 minimal-dist installunknownsource
Gentoo2026.06.13 sparc64 minimal installunknownsource
Gentoo2026.06.13 sparc64 minimal-dist installunknownsource
Gentoo2026.06.14 arm64 minimal installunknownsource
Gentoo2026.06.16 x86 minimal installunknownsource
Gentoo2026.06.17 sparc64 minimal installunknownsource
Gentoo2026.06.17 sparc64 minimal-dist installunknownsource
Gentoo2026.06.21 arm64 minimal installunknownsource
Gentoo2026.06.23 x86 minimal installunknownsource
Gentoo2026.06.25 powerpc minimal installunknownsource
Gentoo2026.06.25 powerpc minimal-dist installunknownsource
Gentoo2026.07.05 amd64 minimal installunknownsource
Gentoo2026.07.05 arm64 minimal installunknownsource
Gentoo2026.07.07 x86 minimal installunknownsource
Gentoo2026.07.09 powerpc minimal installunknownsource
Gentoo2026.07.09 powerpc minimal-dist installunknownsource
Gentoo2026.07.08 sparc64 minimal installunknownsource
Gentoo2026.07.08 sparc64 minimal-dist installunknownsource
Gentoo2026.07.12 amd64 minimal installunknownsource
Gentoo2026.07.12 amd64 liveguiunknownsource
Gentoo2026.07.12 arm64 minimal installunknownsource
Gentoo2026.07.14 x86 minimal installunknownsource
Gentoo2026.07.15 sparc64 minimal installunknownsource
Gentoo2026.07.15 sparc64 minimal-dist installunknownsource
Gentoo2026.07.16 powerpc minimal installunknownsource
Gentoo2026.07.16 powerpc minimal-dist installunknownsource
Gentoo2026.07.19 arm64 minimal installunknownsource
Gentoo2026.07.21 x86 minimal installunknownsource
Gentoo2026.07.23 powerpc minimal installunknownsource
Gentoo2026.07.23 powerpc minimal-dist installunknownsource
Gentoo2026.07.22 sparc64 minimal installunknownsource
Gentoo2026.07.22 sparc64 minimal-dist installunknownsource
Gentoo2026.07.26 arm64 minimal installunknownsource
Gentoo2026.07.28 x86 minimal installunknownsource
Gentoo2026.07.29 sparc64 minimal installunknownsource
Gentoo2026.07.29 sparc64 minimal-dist installunknownsource
Gentoo2026.07.30 powerpc minimal installunknownsource
Gentoo2026.07.30 powerpc minimal-dist installunknownsource
Gentoo2026.08.02 arm64 minimal installunknownsource
Gentoo2026.08.04 x86 minimal installunknownsource
Gentoo2026.08.06 powerpc minimal installunknownsource
Gentoo2026.08.06 powerpc minimal-dist installunknownsource
Gentoo2026.08.09 arm64 minimal installunknownsource
Gentoo2026.08.11 amd64 minimal installunknownsource
Gentoo2026.08.11 amd64 liveguiunknownsource
Gentoo2026.08.11 x86 minimal installunknownsource
Gentoo2026.08.13 powerpc minimal installunknownsource
Gentoo2026.08.13 powerpc minimal-dist installunknownsource
Gentoo2026.08.05 sparc64 minimal installunknownsource
Gentoo2026.08.05 sparc64 minimal-dist installunknownsource
Gentoo2026.08.16 amd64 minimal installunknownsource
Gentoo2026.08.16 arm64 minimal installunknownsource
Gentoo2026.08.18 x86 minimal installunknownsource
Gentoo2026.08.20 powerpc minimal installunknownsource
Gentoo2026.08.20 powerpc minimal-dist installunknownsource
Gentoo2026.08.19 sparc64 minimal installunknownsource
Gentoo2026.08.19 sparc64 minimal-dist installunknownsource
Gentoo2026.08.23 amd64 minimal installunknownsource
Gentoo2026.08.23 amd64 liveguiunknownsource
Gentoo2026.08.23 arm64 minimal installunknownsource
Gentoo2026.08.25 x86 minimal installunknownsource
Gentoo2026.08.26 sparc64 minimal installunknownsource
Gentoo2026.08.26 sparc64 minimal-dist installunknownsource
Gentoo2026.08.27 powerpc minimal installunknownsource
Gentoo2026.08.27 powerpc minimal-dist installunknownsource
Gentoo2026.08.30 amd64 minimal installunknownsource
Gentoo2026.08.30 amd64 liveguiunknownsource
Gentoo2026.08.30 arm64 minimal installunknownsource
Gentoo2026.08.30 x86 minimal installunknownsource
Gentoo2026.09.01 x86 minimal installunknownsource
Gentoo2026.09.03 powerpc minimal installunknownsource
Gentoo2026.09.03 powerpc minimal-dist installunknownsource
Gentoo2026.09.06 amd64 minimal installunknownsource
Gentoo2026.09.06 arm64 minimal installunknownsource
Gentoo2026.09.06 amd64 liveguiunknownsource
Gentoo2026.09.08 x86 minimal installunknownsource

References

  1. ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt
  2. http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
  3. http://rhn.redhat.com/errata/RHSA-2005-357.html
  4. http://secunia.com/advisories/18100
  5. http://secunia.com/advisories/21253
  6. http://secunia.com/advisories/22033
  7. http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852
  8. http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1
  9. http://www.debian.org/security/2005/dsa-752
  10. http://www.osvdb.org/15487
  11. http://www.securityfocus.com/archive/1/394965
  12. http://www.securityfocus.com/bid/12996
  13. http://www.securityfocus.com/bid/19289
  14. http://www.us-cert.gov/cas/techalerts/TA06-214A.html
  15. http://www.vupen.com/english/advisories/2006/3101
  16. https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10242
  17. https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1169
  18. https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A765
  19. ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt
  20. http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html