CVE-2005-0988
Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- freebsd:freebsd
- gentoo:linux
- gnu:gzip
- redhat:enterprise_linux
- redhat:enterprise_linux_desktop
- redhat:linux_advanced_workstation
- trustix:secure_linux
- turbolinux:turbolinux_appliance_server
- turbolinux:turbolinux_desktop
- turbolinux:turbolinux_home
- turbolinux:turbolinux_server
- turbolinux:turbolinux_workstation
- ubuntu:ubuntu_linux