PT-2004-2266 · Gnu+1 · Gzip+1
CVE-2004-1349
·
Publicado
2004-10-04
·
Atualizado
2023-03-24
CVSS v2.0
2.1
Baixa
| Vetor | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
gzip version 1.3 and earlier in Solaris 8
Description:
The issue allows local users to view or modify files that are hard linked to the target files when gzip is called with the -f or -force flags.
Recommendations:
For gzip version 1.3 and earlier in Solaris 8, avoid using the -f or -force flags until a patch is available. As a temporary workaround, consider restricting file access to prevent unauthorized modifications.
Correção
Improper Privilege Management
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Solaris
Gzip