3.7

CVE-2005-0988: freebsd

CVSS: 3.7v2.0LowModified
AliasesDEBIAN-CVE-2005-0988
Published 06-04-2005Last modified 07-08-2024
Open JSON
Some data may be incomplete
  • 1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2005-0988 is a low (CVSS 3.7) vulnerability in freebsd. EPSS estimates a 0.66% chance of exploitation in the next 30 days, higher than 50.3% of scored vulnerabilities.

Overall risk
15/100
0100
Low · default modelHow is this calculated?
CVSS score
3.7/10
010
Low · v2.0 (NVD)
EPSS score
0.66%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2
DSA-752-1RHSA-2005:357

Timeline

  1. 06-04-2005
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

0.66%

Chance of exploitation in the next 30 days

Percentile

50%

Versus all other CVEs

30-day change

0.00 pp

From 0.66% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.66%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Turbolinux4 products
Redhat3 products
Debian1 product
  • gzip< 1.3.5-10
Freebsd1 product
  • freebsdEOL4.0 | 4.0:alpha | 4.0:releng | 4.1 | 4.1.1 | 4.1.1:release | 4.1.1:stable | 4.2 | 4.2:stable | 4.3 | 4.3:release | 4.3:release_p38 | 4.3:releng | 4.3:stable | 4.4 | 4.4:release_p42 | 4.4:releng | 4.4:stable | 4.5 | 4.5:release | 4.5:release_p32 | 4.5:releng | 4.5:stable | 4.6 | 4.6:release | 4.6:release_p20 | 4.6:releng | 4.6:stable | 4.6.2 | 4.7 | 4.7:release | 4.7:release_p17 | 4.7:releng | 4.7:stable | 4.8 | 4.8:pre-release | 4.8:release_p6 | 4.8:releng | 4.9 | 4.9:pre-release | 4.9:releng | 4.10 | 4.10:release | 4.10:release_p8 | 4.10:releng | 4.11:release_p3 | 4.11:releng | 5.0 | 5.0:alpha | 5.0:release_p14 | 5.0:releng | 5.1 | 5.1:alpha | 5.1:release | 5.1:release_p5 | 5.1:releng | 5.2 | 5.2.1:release | 5.2.1:releng | 5.3 | 5.3:release | 5.3:releng | 5.3:stable | 5.4:pre-release | 5.4:release | 5.4:releng
Gnu1 product
  • gzip1.2.4 | 1.2.4a | 1.3.3
Trustix1 product
Ubuntu1 product

7 vendors · 12 products

References

18 links
Show all 18 references