CVE-2002-0760: Race Condition
Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions before setting the permissions to what is specified in the bzip2 archive, which could allow local users to read the files as they are being decompressed.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0760?
CVE-2002-0760 is classified as a moderate severity vulnerability due to the potential for local users to read sensitive files.
How do I fix CVE-2002-0760?
To fix CVE-2002-0760, upgrade to bzip2 version 1.0.2 or later, which addresses this race condition.
Which software versions are affected by CVE-2002-0760?
CVE-2002-0760 affects bzip2 versions prior to 1.0.2, including versions 0.9.0 through 1.0.1.
How can I determine if my system is vulnerable to CVE-2002-0760?
You can determine vulnerability to CVE-2002-0760 by checking the installed version of bzip2 on your system.
What types of systems are impacted by CVE-2002-0760?
CVE-2002-0760 impacts FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems.