CVE-2011-4089 The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precr...
MediumCVSS 4.6
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/bzip2(Debian:12) | < 1.0.6-1 | 1.0.6-1 |
| debian/bzip2(Debian:13) | < 1.0.6-1 | 1.0.6-1 |
| debian/bzip2(Debian:14) | < 1.0.6-1 | 1.0.6-1 |
| bzip2 | <= 1.0.4 | No fix listed |
| bzip2 | = 1.0 | No fix listed |
| bzip2 | = 1.0.1 | No fix listed |
| bzip2 | = 1.0.2 | No fix listed |
| bzip2 | = 1.0.3 | No fix listed |
References
- Debian Security Tracker CVE-2011-4089 vendor-advisory
- bugs.debian.org issue-tracking
- 20111025 Re: Symlink vulnerabilities mailing-list
- 18147 exploit
- [oss-security] 20111028 Re: Request for CVE Identifier: bzexe insecure temporary file mailing-list
- USN-1308-1 patch vendor-advisory
- bugs.debian.org patch