Revision Date: | 2005-06-01 | Version: | 16 | Title: | gzip -force File Permission Alteration Vulnerability | Description: | gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files. | Family: | unix | Class: | vulnerability | Status: | ACCEPTED | Reference(s): | CVE-2004-1349
| Platform(s): | Sun Solaris 8
| Product(s): | Licence Logging Service
| Definition Synopsis | Solaris 8 Installed AND GNU Zip (gzip, SUNWgzip) installed
AND NOT Patch 112668-02 or later installed
|
|