CVE-2002-0759
Published: December 8, 2002
bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not use the O_EXCL flag to create files during decompression and does not warn the user if an existing file would be overwritten, which could allow attackers to overwrite files via a bzip2 archive.
MEDIUM
CVSS v2: 5
CVSS v2: 5
Status
DocFilters Release | Package | State | Justification | Comment |
---|---|---|---|---|
25.1 | bzip2 (1.0.8) | Not Affected | Code Not Present | 1.0.8 does not match CVE configuration. |
24.4 | bzip2 (1.0.8) | Not Affected | Code Not Present | 1.0.8 does not match CVE configuration. |
24.4.0 | bzip2 (1.0.8) | Not Affected | Code Not Present | 1.0.8 does not match CVE configuration. |
24.3 | bzip2 (1.0.8) | Not Affected | Code Not Present | 1.0.8 does not match CVE configuration. |
24.2.1 | bzip2 (1.0.8) | Not Affected | Code Not Present | 1.0.8 does not match CVE configuration. |
24.2 | bzip2 (1.0.8) | Not Affected | Code Not Present | 1.0.8 does not match CVE configuration. |
24.1 | bzip2 (1.0.8) | Not Affected | Code Not Present | 1.0.8 does not match CVE configuration. |
23.3 | bzip2 (1.0.8) | Not Affected | Code Not Present | 1.0.8 does not match CVE configuration. |
23.2.1 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
23.2 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
23.1 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
22.4 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
22.3 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
22.2 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
22.1 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
21.11.1 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
21.11 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
21.8.1 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
21.8 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
21.5.1 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
21.5.0 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
21.2.0 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
11.4.20 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
11.4.19.3667 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
11.4.18.3599 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
11.4.17 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
11.4.16.3445 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
11.4.15.3368 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
11.4.14.3263 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
11.4.13.3179 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
11.4.12.3054 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
11.4.11.3040 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
11.4.11.2990 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
11.4.10.2934 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
11.4.9.2878 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |
11.4.8.2822 | bzip2 (1.0.6) | Not Affected | Code Not Present | 1.0.6 does not match CVE configuration. |