Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:L/AC:H/Au:N/C:P/I:P/A:P)
Производитель ПО
Наименование ПО
bzip2
(Unknown)
Описание
Как исправить
Ссылки
BUGTRAQ (20050330 bzip2 TOCTOU file-permissions vulnerability): http://marc.theaimsgroup.com/?l=bugtraq&m=111229375217633&w=2
BID (12954): http://www.securityfocus.com/bid/12954
XF (bzip2-toctou-symlink(19926)): http://xforce.iss.net/xforce/xfdb/19926
DEBIAN (DSA-730): http://www.debian.org/security/2005/dsa-730
OVAL (OVAL1154): http://oval.mitre.org/oval/definitions/data/oval1154.html
FEDORA (FLSA:158801): http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html
MANDRIVA (MDKSA-2006:026): http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:026
REDHAT (RHSA-2005:474): http://www.redhat.com/support/errata/RHSA-2005-474.html
SGI (20060301-01-U): ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc
OVAL (oval:org.mitre.oval:def:1154): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1154
OPENPKG (OpenPKG-SA-2007.002): http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.002.html
BID (12954): http://www.securityfocus.com/bid/12954
XF (bzip2-toctou-symlink(19926)): http://xforce.iss.net/xforce/xfdb/19926
DEBIAN (DSA-730): http://www.debian.org/security/2005/dsa-730
OVAL (OVAL1154): http://oval.mitre.org/oval/definitions/data/oval1154.html
FEDORA (FLSA:158801): http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html
MANDRIVA (MDKSA-2006:026): http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:026
REDHAT (RHSA-2005:474): http://www.redhat.com/support/errata/RHSA-2005-474.html
SGI (20060301-01-U): ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc
OVAL (oval:org.mitre.oval:def:1154): http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1154
OPENPKG (OpenPKG-SA-2007.002): http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.002.html
