CVE-2002-0760

Published: December 8, 2002
Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions before setting the permissions to what is specified in the bzip2 archive, which could allow local users to read the files as they are being decompressed.
LOW
CVSS v2: 1.2

Status

DocFilters Release Package State Justification Comment
25.1 bzip2 (1.0.8) Not Affected Code Not Present 1.0.8 does not match CVE configuration.
24.4 bzip2 (1.0.8) Not Affected Code Not Present 1.0.8 does not match CVE configuration.
24.4.0 bzip2 (1.0.8) Not Affected Code Not Present 1.0.8 does not match CVE configuration.
24.3 bzip2 (1.0.8) Not Affected Code Not Present 1.0.8 does not match CVE configuration.
24.2.1 bzip2 (1.0.8) Not Affected Code Not Present 1.0.8 does not match CVE configuration.
24.2 bzip2 (1.0.8) Not Affected Code Not Present 1.0.8 does not match CVE configuration.
24.1 bzip2 (1.0.8) Not Affected Code Not Present 1.0.8 does not match CVE configuration.
23.3 bzip2 (1.0.8) Not Affected Code Not Present 1.0.8 does not match CVE configuration.
23.2.1 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
23.2 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
23.1 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
22.4 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
22.3 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
22.2 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
22.1 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
21.11.1 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
21.11 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
21.8.1 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
21.8 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
21.5.1 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
21.5.0 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
21.2.0 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.20 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.19.3667 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.18.3599 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.17 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.16.3445 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.15.3368 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.14.3263 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.13.3179 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.12.3054 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.11.3040 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.11.2990 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.10.2934 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.9.2878 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.
11.4.8.2822 bzip2 (1.0.6) Not Affected Code Not Present 1.0.6 does not match CVE configuration.

Severity score breakdown

References