CVE-2005-0988
CVE-2005-0988 is a low-severity vulnerability in Gnu Gzip with a CVSS 2.0 base score of 3.7. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Low (CVSS 2.0 base score 3.7)
- EPSS exploit prediction: 1% (47th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Gnu Gzip
- Published:
- Last modified:
Description
Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.
Frequently asked questions
- What is CVE-2005-0988?
- Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.
- How severe is CVE-2005-0988?
- CVE-2005-0988 has a CVSS 2.0 base score of 3.7, rated low severity.
- Is CVE-2005-0988 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (47th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2005-0988?
- CVE-2005-0988 primarily affects Gnu Gzip. In total, 104 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2005-0988?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2005-0988 published?
- CVE-2005-0988 was published on 2005-05-02 and last updated on 2026-06-16.
References
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt
- http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
- http://rhn.redhat.com/errata/RHSA-2005-357.html
- http://secunia.com/advisories/18100
- http://secunia.com/advisories/21253
- http://secunia.com/advisories/22033
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1
- http://www.debian.org/security/2005/dsa-752
- http://www.osvdb.org/15487
- http://www.securityfocus.com/archive/1/394965
- http://www.securityfocus.com/bid/12996
- http://www.securityfocus.com/bid/19289
- http://www.us-cert.gov/cas/techalerts/TA06-214A.html
- http://www.vupen.com/english/advisories/2006/3101
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10242
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1169
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A765
Affected products (104)
- cpe:2.3:a:gnu:gzip:1.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gzip:1.2.4a:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:gzip:1.3.3:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:*
More vulnerabilities in Gnu Gzip
- CVE-2004-0603 — Critical (CVSS 10.0): gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the…
- CVE-2022-1271 — High (CVSS 8.8): An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's…
- CVE-2026-41992 — High (CVSS 7.5): GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of…
- CVE-2001-1228 — High (CVSS 7.5): Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name,…
- CVE-2010-0001 — Medium (CVSS 6.8): Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and…
- CVE-2009-2624 — Medium (CVSS 6.8): The huft_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which…