gzip: race condition and directory traversal
| Package(s): | gzip | CVE #(s): | CAN-2005-0988 CAN-2005-1228 | ||||||||||||||||||||||||||||||||
| Created: | May 4, 2005 | Updated: | July 13, 2005 | ||||||||||||||||||||||||||||||||
| Description: | gzip suffers from a race condition which could allow a fast-fingered attacker to change the permissions on files owned by others. There is also a directory traversal vulnerability associated with the -N option. | ||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||