CVE-2002-0759 describes a vulnerability in bzip2 versions prior to 1.0.2, affecting FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and potentially other systems. The flaw allows an attacker to overwrite arbitrary files on a victim's system by crafting a malicious bzip2 archive, as the decompression process fails to use the O_EXCL flag and does not warn about existing file overwrites. Rated with a CVSS score of 5.0 (Medium), this vulnerability has a network-based attack vector and low attack complexity, requiring no authentication. The potential impact is limited to integrity, as an attacker can overwrite files but not necessarily gain code execution or access confidential information. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
0.9.0CPE matchmatch criteria | cpe:2.3:a:bzip:bzip2:0.9.0:*:*:*:*:*:*:* | ||
0.9.0aCPE matchmatch criteria | cpe:2.3:a:bzip:bzip2:0.9.0a:*:*:*:*:*:*:* | ||
0.9.0bCPE matchmatch criteria | cpe:2.3:a:bzip:bzip2:0.9.0b:*:*:*:*:*:*:* | ||
0.9.0cCPE matchmatch criteria | cpe:2.3:a:bzip:bzip2:0.9.0c:*:*:*:*:*:*:* | ||
0.9.5aCPE matchmatch criteria | cpe:2.3:a:bzip:bzip2:0.9.5a:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:P/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.