Security Advisory

CVE-2002-0760

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2003-04-02 05:00:00

Last updated 2024-08-08 03:03:47

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions before setting the permissions to what is specified in the bzip2 archive, which could allow local users to read the files as they are being decompressed.

← Browse all CVEs View on cve.org ↗