Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission to match the original file, which allows local users to bypass the intended access restrictions.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1200
Reference (s):
- BID:72101
- URL: http://www.securityfocus.com/bid/72101
- FEDORA:FEDORA-2020-07fcbfddbd
- URL: https://lists.fedoraproject.org/archives/list/[email protected]/message/IBKV7AT6O3FGQ735PFOGQ4Q5VODMSHE5/
- FEDORA:FEDORA-2020-8b89d5b9eb