p PatchFirst

CVE-2004-0970

CVE-2004-0970

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367.

EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • gzip Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.3.5-8

    Update to 1.3.5-8

  • gzip Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.3.5-8

    Update to 1.3.5-8

  • gzip Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.3.5-8

    Update to 1.3.5-8

Original sources

Check your server →