CVE-2002-0761

bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual files when creating an archive, which could cause the files to be extracted with less restrictive permissions than intended.

• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-039.0.txt
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:25.bzip2.ascPatch, Vendor Advisory
• http://www.iss.net/security_center/static/9128.phpPatch, Vendor Advisory
• http://www.securityfocus.com/bid/4776Patch, Vendor Advisory
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-039.0.txt
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:25.bzip2.ascPatch, Vendor Advisory
• http://www.iss.net/security_center/static/9128.phpPatch, Vendor Advisory
• http://www.securityfocus.com/bid/4776Patch, Vendor Advisory

Published

Aug 12, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0755Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier does not ver…
• CVE-2002-0756Cross-site scripting vulnerability in the authentication pag…
• CVE-2002-0757(1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts …
• CVE-2002-0758ifup-dhcp script in the sysconfig package for SuSE 8.0 allow…
• CVE-2002-0759bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1…
• CVE-2002-0760Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earl…
• CVE-2002-0762shadow package in SuSE 8.0 allows local users to destroy the…
• CVE-2002-0763Vulnerability in administration server for HP VirtualVault 4…
• CVE-2002-0764Phorum 3.3.2a allows remote attackers to execute arbitrary c…
• CVE-2002-0765sshd in OpenSSH 3.2.2, when using YP with netgroups and unde…
• CVE-2002-0766OpenBSD 2.9 through 3.1 allows local users to cause a denial…
• CVE-2002-0767simpleinit on Linux systems does not close a read/write FIFO…