CVE-2011-4089

bzip2 <1.0.5 - Code Injection

Title source: llm

Description

The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory.

Exploits (1)

exploitdb WORKING POC VERIFIED

by vladz · clocallinux

https://www.exploit-db.com/exploits/18147

View Code ZIP pw:eip

References (5)

[Exploit] http://www.exploit-db.com/exploits/18147

[Patch] http://www.ubuntu.com/usn/USN-1308-1

[Patch] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=632862

[Mailing List] http://www.openwall.com/lists/oss-security/2011/10/28/16

[Mailing List] http://seclists.org/fulldisclosure/2011/Oct/804

Scores

EPSS 0.0015

EPSS Percentile 35.5%

Details

CWE

CWE-264

Status published

Products (5)

bzip/bzip2 1.0

bzip/bzip2 1.0.1

bzip/bzip2 1.0.2

bzip/bzip2 1.0.3

bzip/bzip2 < 1.0.4

Published Apr 16, 2014

Tracked Since Feb 18, 2026