Description
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
References
- solaris-gzip-modify-privileges(17577) vdb-entry
- 57600 vendor-advisory
- VU#635998 third-party-advisory
- oval:org.mitre.oval:def:1654 vdb-entry signature
- 11318 vdb-entry
- 12744 third-party-advisory