Lucene search
MitreCVE-2002-0761HistoryApr 02, 2003 - 5:00 a.m.
CVE-2002-0761
2003-04-0205:00:00
mitre
web.nvd.nist.gov
28
cve-2002-0761
bzip2
freebsd
openlinux
permissions
archive vulnerability
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
7
Confidence
Low
EPSS
0.001
Percentile
20.0%
bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual files when creating an archive, which could cause the files to be extracted with less restrictive permissions than intended.
Affected configurations
Node
bzipbzip2Match0.9.0
ORbzipbzip2Match0.9.0a
ORbzipbzip2Match0.9.0b
ORbzipbzip2Match0.9.0c
ORbzipbzip2Match0.9.5a
ORbzipbzip2Match0.9.5b
ORbzipbzip2Match0.9.5c
ORbzipbzip2Match0.9.5d
ORbzipbzip2Match1.0
ORbzipbzip2Match1.0.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bzip | bzip2 | 0.9.0 | cpe:2.3:a:bzip:bzip2:0.9.0:*:*:*:*:*:*:* |
| bzip | bzip2 | 0.9.0a | cpe:2.3:a:bzip:bzip2:0.9.0a:*:*:*:*:*:*:* |
| bzip | bzip2 | 0.9.0b | cpe:2.3:a:bzip:bzip2:0.9.0b:*:*:*:*:*:*:* |
| bzip | bzip2 | 0.9.0c | cpe:2.3:a:bzip:bzip2:0.9.0c:*:*:*:*:*:*:* |
| bzip | bzip2 | 0.9.5a | cpe:2.3:a:bzip:bzip2:0.9.5a:*:*:*:*:*:*:* |
| bzip | bzip2 | 0.9.5b | cpe:2.3:a:bzip:bzip2:0.9.5b:*:*:*:*:*:*:* |
| bzip | bzip2 | 0.9.5c | cpe:2.3:a:bzip:bzip2:0.9.5c:*:*:*:*:*:*:* |
| bzip | bzip2 | 0.9.5d | cpe:2.3:a:bzip:bzip2:0.9.5d:*:*:*:*:*:*:* |
| bzip | bzip2 | 1.0 | cpe:2.3:a:bzip:bzip2:1.0:*:*:*:*:*:*:* |
| bzip | bzip2 | 1.0.1 | cpe:2.3:a:bzip:bzip2:1.0.1:*:*:*:*:*:*:* |
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
7
Confidence
Low
EPSS
0.001
Percentile
20.0%
Related for CVE-2002-0761