CVE-2005-0988
N/A
Published: April 6, 2005 at 04:00 AM UTC
Updated: June 16, 2026 at 10:12 PM UTC
13 products affected across 7 vendorsUbuntu LinuxEnterprise LinuxEnterprise Linux Desktop
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.7%
Description
Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
Ubuntu Linux· Canonicalrubygems
95%4.04.0 alpha4.0 releng4.14.1.14.1.1 release4.1.1 stable4.104.10 release4.10 release_p84.10 releng4.11 release_p34.11 releng4.11 stable4.24.2 stable4.34.3 release4.3 release_p384.3 releng4.3 stable4.44.4 release_p424.4 releng4.4 stable4.54.5 release4.5 release_p324.5 releng4.5 stable4.64.6 release4.6 release_p204.6 releng4.6 stable4.6.24.74.7 release4.7 release_p174.7 releng4.7 stable4.84.8 pre-release4.8 release_p64.8 releng4.94.9 pre-release4.9 releng5.05.0 alpha5.0 release_p145.0 releng5.15.1 alpha5.1 release5.1 release_p55.1 releng5.25.2.1 release5.2.1 releng5.35.3 release5.3 releng5.3 stable5.4 pre-release5.4 release5.4 releng
95%
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt
- http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
- http://rhn.redhat.com/errata/RHSA-2005-357.html
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1
References (18)
Vendor Advisoryx_refsource_SCO
Source: [email protected]
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txtVendor Advisoryx_refsource_APPLE
Source: [email protected]
http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.htmlVendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2005-357.htmlVendor Advisoryx_refsource_SLACKWARE
Source: [email protected]
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852Vendor Advisoryx_refsource_SUNALERT
Source: [email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1Quick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card