Unscored CVE-2015-1200 EUVD-2015-1341GHSA-cphc-w6qw-f53m

Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission…

Published Jan 23, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission to match the original file, which allows local users to bypass the intended access restrictions.

References

pxz-cve20151200-sec-bypass(100207) vdb-entry
[oss-security] 20150118 Re: CVE Request: pxz -- race condition in setting permissions mailing-list
72101 vdb-entry
FEDORA-2020-07fcbfddbd vendor-advisory
FEDORA-2020-8b89d5b9eb vendor-advisory
FEDORA-2020-c9eb911737 vendor-advisory