Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2005-0953 Details

Description

Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-004.txt.asc	CVE
ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc	CVE
http://docs.info.apple.com/article.html?artnum=307041	CVE
http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html	CVE
http://marc.info/?l=bugtraq&m=111229375217633&w=2	CVE
http://secunia.com/advisories/19183	CVE
http://secunia.com/advisories/27274	CVE
http://secunia.com/advisories/27643	CVE
http://secunia.com/advisories/29940	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/19926	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10902	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1154	CVE
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103118-1	CVE
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200191-1	CVE
http://www.debian.org/security/2005/dsa-730	CVE	PatchVendor Advisory
http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html	CVE
http://www.mandriva.com/security/advisories?name=MDKSA-2006:026	CVE
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.002.html	CVE
http://www.redhat.com/support/errata/RHSA-2005-474.html	CVE
http://www.securityfocus.com/archive/1/456430/30/8730/threaded	CVE
http://www.securityfocus.com/bid/12954	CVE
http://www.securityfocus.com/bid/26444	CVE
http://www.us-cert.gov/cas/techalerts/TA07-319A.html	CVE	US Government Resource
http://www.vupen.com/english/advisories/2007/3525	CVE
http://www.vupen.com/english/advisories/2007/3868	CVE
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-004.txt.asc	[email protected]
ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc	[email protected]
http://docs.info.apple.com/article.html?artnum=307041	[email protected]
http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html	[email protected]
http://marc.info/?l=bugtraq&m=111229375217633&w=2	[email protected]
http://secunia.com/advisories/19183	[email protected]
http://secunia.com/advisories/27274	[email protected]
http://secunia.com/advisories/27643	[email protected]
http://secunia.com/advisories/29940	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/19926	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10902	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1154	[email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103118-1	[email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200191-1	[email protected]
http://www.debian.org/security/2005/dsa-730	[email protected]	PatchVendor Advisory
http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html	[email protected]
http://www.mandriva.com/security/advisories?name=MDKSA-2006:026	[email protected]
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.002.html	[email protected]
http://www.redhat.com/support/errata/RHSA-2005-474.html	[email protected]
http://www.securityfocus.com/archive/1/456430/30/8730/threaded	[email protected]
http://www.securityfocus.com/bid/12954	[email protected]
http://www.securityfocus.com/bid/26444	[email protected]
http://www.us-cert.gov/cas/techalerts/TA07-319A.html	[email protected]	US Government Resource
http://www.vupen.com/english/advisories/2007/3525	[email protected]
http://www.vupen.com/english/advisories/2007/3868	[email protected]

see all 50 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]

Affected Products

Product	Versions
bzip bzip2	0.9 0.9.5_a 0.9.5_b 0.9.5_c 0.9.5_d
CPE cpe:2.3:a:bzip:bzip2:0.9:::::::* cpe:2.3:a:bzip:bzip2:0.9.5_a:::::::* cpe:2.3:a:bzip:bzip2:0.9.5_b:::::::* cpe:2.3:a:bzip:bzip2:0.9.5_c:::::::* cpe:2.3:a:bzip:bzip2:0.9.5_d:::::::* cpe:2.3:a:bzip:bzip2:0.9_a:::::::* cpe:2.3:a:bzip:bzip2:0.9_b:::::::* cpe:2.3:a:bzip:bzip2:0.9_c:::::::* cpe:2.3:a:bzip:bzip2:1.0:::::::* cpe:2.3:a:bzip:bzip2:1.0.1:::::::* cpe:2.3:a:bzip:bzip2:1.0.2:::::::* Remediation No remediation found in references.

Product

Versions

bzip bzip2

0.9

0.9.5_a

0.9.5_b

0.9.5_c

0.9.5_d

CPE

cpe:2.3:a:bzip:bzip2:0.9:*:*:*:*:*:*:*
cpe:2.3:a:bzip:bzip2:0.9.5_a:*:*:*:*:*:*:*
cpe:2.3:a:bzip:bzip2:0.9.5_b:*:*:*:*:*:*:*
cpe:2.3:a:bzip:bzip2:0.9.5_c:*:*:*:*:*:*:*
cpe:2.3:a:bzip:bzip2:0.9.5_d:*:*:*:*:*:*:*
cpe:2.3:a:bzip:bzip2:0.9_a:*:*:*:*:*:*:*
cpe:2.3:a:bzip:bzip2:0.9_b:*:*:*:*:*:*:*
cpe:2.3:a:bzip:bzip2:0.9_c:*:*:*:*:*:*:*
cpe:2.3:a:bzip:bzip2:1.0:*:*:*:*:*:*:*
cpe:2.3:a:bzip:bzip2:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:bzip:bzip2:1.0.2:*:*:*:*:*:*:*

Remediation

No remediation found in references.

Change History

9 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 20, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 19, 2018	CVE Modified	[email protected]
Oct 11, 2017	CVE Modified	[email protected]
Jul 11, 2017	CVE Modified	[email protected]
Oct 18, 2016	CVE Modified	[email protected]
Jun 13, 2005	Initial Analysis	[email protected]