CVE-2005-0953: Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a...

Security readout for executives and security teams

This is an old local bzip2 flaw. A user already on a system could abuse a timing issue during decompression to change permissions on another file. It is not described as remotely exploitable, but it matters on shared Unix-like systems where file permissions protect sensitive data. Exposure is most likely on legacy systems still running bzip2 1.0.2 or earlier, especially multi-user servers or automation environments where decompression occurs near user-controlled files. Modern supported distributions are likely patched, but the bundle does not prove current package status. Treat this as a legacy hygiene issue unless vulnerable shared systems remain in production. It is not a current KEV item, but on old multi-user servers it can undermine file permission boundaries and should be removed through normal patching or retirement. Mitigation focus: Update bzip2 using the relevant operating system vendor security advisory.; Retire or isolate unsupported systems that cannot receive fixed packages.; Avoid privileged decompression of untrusted archives on vulnerable hosts..

Prepared

Jun 30, 2026, 12:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.