OSVDB ID: 18530 Title: UnZip Race Condition Arbitrary File Permission Modification |
Info |
|
|
Dates |
||||
|
|
Description |
UnZip contains a flaw that may allow a malicious local user to change permissions of arbitrary files on the system. The issue is triggered via a hard link attack on a file while it is being decompressed. It is possible that the flaw may allow arbitrary file permission modification resulting in a loss of confidentiality and integrity. |
Classification |
Location:
Local Access Required
Attack Type: Race Condition Impact: Loss of Confidentiality, Loss of Integrity Exploit: Exploit Public Disclosure: OSVDB Verified |
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue. |
Products |
|
References |
|
Credit |
|
gmail.com -