Oval Definition:oval:org.mitre.oval:def:1654
Revision Date:2005-06-01Version:16
Title:gzip -force File Permission Alteration Vulnerability
Description:gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2004-1349
Platform(s):Sun Solaris 8
Product(s):Licence Logging Service
Definition Synopsis
  • Solaris 8 Installed
  • AND GNU Zip (gzip, SUNWgzip) installed
  • AND NOT Patch 112668-02 or later installed
  • BACK