bugtraq - Zip 2,31 bad default file-permissions vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Tue, 2 Aug 2005 23:22:54 +0100
From: Imran Ghory <imranghory@...il.com>
To: bugtraq@...urityfocus.com
Subject: Zip 2,31 bad default file-permissions vulnerability

================================
Zip bad default file-permissions vulnerability
================================

Software: Zip
Version: 2.31
Software URL: <http://www.info-zip.org/Zip.html>
Platform:  Unix, Linux.
Vulnerability type: File permission, privacy.
Severity: Medium. Allows local user to read files belonging to the
gzip user which they couldn't otherwisre.

Vulnerable software
====================

Zip 2.31 and previous versions running on unix.

Vulnerability
==============

A zip file created by Zip 2.3.1 has the permissions 644 by default,
Therefore any file compressed becomes world readable.

Particularly at risk are backup systems which zip password files,
databases and other confidential files which are only meant to  be
readable by a single user or group.

Workaround
========

None at the moment, It should be straightforward to fix in the source
by setting the umask correctly.

--
Imran Ghory