CVE-2015-1200
Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when...
Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission to match the original file, which allows local users to bypass the intended access restrictions.
Exploit likelihood
What each source reports
NVD Score used
Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission to match the original file, which allows local users to bypass the intended access restrictions.
- Record
CVE-2015-1200- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-362
- Updated
- 2026-11-02
CVE List No score
Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission to match the original file, which allows local users to bypass the intended access restrictions.
- Record
CVE-2015-1200- Updated
- 2026-11-02
EUVDEUVD-2015-1341 No score
Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission to match the original file, which allows local users to bypass the intended access restrictions.
- Record
EUVD-2015-1341- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cphc-w6qw-f53m No score
Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when...
Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission to match the original file, which allows local users to bypass the intended access restrictions.
- Record
GHSA-cphc-w6qw-f53m- Weakness
- CWE-362
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-1200 is a low vulnerability (CVSS 2.1) in Pxz Project Pxz, published January 23, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/100207
seclists.org/oss-sec/2015/q1/177
securityfocus.com/bid/72101
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBKV7AT6O3FGQ735PFOGQ4Q5VODMSHE5
Show 5 moreShow less
nvd.nist.gov/vuln/detail/CVE-2015-1200
github.com/advisories/GHSA-cphc-w6qw-f53m