CVE-1999-1332
CVE-1999-1332
This page contains facts from public vulnerability sources. Check the original advisory before updating.
gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file.
EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.debian.org/security/2003/dsa-308
- http://www.securityfocus.com/bid/7845
- http://www.iss.net/security_center/static/7241.php
- http://www.redhat.com/support/errata/rh50-errata-general.html#gzip
- http://marc.info/?l=bugtraq&m=88603844115233&w=2
- http://www.osvdb.org/3812
- https://nvd.nist.gov/vuln/detail/CVE-1999-1332