CVE-2002-0759

Published: December 8, 2002
bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not use the O_EXCL flag to create files during decompression and does not warn the user if an existing file would be overwritten, which could allow attackers to overwrite files via a bzip2 archive.
MEDIUM
CVSS v2: 5

Status

DocFilters Release Package State Justification Comment
25.1 bzip2 (1.0.8) Not Affected Code Not Present 1.0.8 does not match CVE configuration.
24.4 bzip2 (1.0.8) Not Affected Code Not Present 1.0.8 does not match CVE configuration.
24.4.0 bzip2 (1.0.8) Not Affected Code Not Present 1.0.8 does not match CVE configuration.
24.3 bzip2 (1.0.8) Not Affected Code Not Present 1.0.8 does not match CVE configuration.
24.2.1 bzip2 (1.0.8) Not Affected Code Not Present 1.0.8 does not match CVE configuration.
24.2 bzip2 (1.0.8) Not Affected Code Not Present 1.0.8 does not match CVE configuration.
24.1 bzip2 (1.0.8) Not Affected Code Not Present 1.0.8 does not match CVE configuration.
23.3 bzip2 (1.0.8) Not Affected Code Not Present 1.0.8 does not match CVE configuration.
23.2.1 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
23.2 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
23.1 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
22.4 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
22.3 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
22.2 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
22.1 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
21.11.1 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
21.11 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
21.8.1 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
21.8 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
21.5.1 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
21.5.0 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
21.2.0 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.20 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.19.3667 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.18.3599 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.17 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.16.3445 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.15.3368 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.14.3263 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.13.3179 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.12.3054 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.11.3040 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.11.2990 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.10.2934 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.9.2878 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.8.2822 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.

Severity score breakdown

References