gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
References
Link | Resource |
---|---|
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57600-1&searchclause=security | Patch Vendor Advisory |
http://www.kb.cert.org/vuls/id/635998 | Patch Third Party Advisory US Government Resource |
http://secunia.com/advisories/12744 | Patch Vendor Advisory |
http://www.securityfocus.com/bid/11318 | Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/17577 | |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1654 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2004-10-03 21:00
Updated : 2018-10-30 09:25
NVD link : CVE-2004-1349
Mitre link : CVE-2004-1349
JSON object : View
CWE
Products Affected
sun
- solaris
- sunos