Info-ZIP UnZip CHMod File Permission Modification Race Condition Weakness

Info-ZIP UnZip CHMod File Permission Modification Race Condition Weakness

References:

Unzip Home Page (Info-ZIP)
unzip TOCTOU file-permissions vulnerability (Imran Ghory )
CVE-2005-2475 CVE-2008-0888 Race condition, Denial of Service (DoS), and possib (Sun)
ASA-2007-209 unzip security and bug fix update (RHSA-2007-0203) (Avaya)
RHSA-2007:0203 unzip security and bug fix update (Red Hat)

Privacy Statement
Copyright 2010, SecurityFocus