CVE-2005-0988: Race Condition
Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0988?
CVE-2005-0988 is considered a moderate severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2005-0988?
To fix CVE-2005-0988, update the GNU gzip version to 1.3.4 or later, or apply available vendor patches.
Which versions of gzip are affected by CVE-2005-0988?
CVE-2005-0988 affects gzip versions 1.2.4, 1.2.4a, and 1.3.3 and earlier.
What impact does CVE-2005-0988 have on system security?
The impact of CVE-2005-0988 allows local users to alter permissions of arbitrary files, potentially compromising system integrity.
Is there a workaround for CVE-2005-0988?
A temporary workaround for CVE-2005-0988 is to avoid using gzip for decompressing files in sensitive locations.