CVE-2015-1200 Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission to match the original file, which allows local users to bypa...
LowCVSS 2.1
EPSS 0.28%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission to match the original file, which allows local users to bypass the intended access restrictions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pxz project pxz | = 4.999.99-beta3 | No fix listed |
References
- [oss-security] 20150118 Re: CVE Request: pxz -- race condition in setting permissions mailing-list
- 72101 vdb-entry
- pxz-cve20151200-sec-bypass(100207) vdb-entry
- FEDORA-2020-8b89d5b9eb vendor-advisory
- FEDORA-2020-07fcbfddbd vendor-advisory
- FEDORA-2020-c9eb911737 vendor-advisory