CVE-2004-0603: Critical severity GNU gzip vulnerability
Published Jun 30, 2004
·Updated
gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users to execute arbitrary commands, a different vulnerability than CVE-1999-1332.
Affected Software
1 affected component
GNU gzip<=1.3.3
Remediation
Patch Available
Patch Available
Event History
Jun 30, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0603?
CVE-2004-0603 is classified as a high severity vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2004-0603?
To fix CVE-2004-0603, upgrade gzip to version 1.3.4 or later where the issue is resolved.
3
Who is affected by CVE-2004-0603?
Users of gzip version 1.3.3 and earlier are affected by CVE-2004-0603.
4
What type of vulnerability is CVE-2004-0603?
CVE-2004-0603 is a command execution vulnerability that can be exploited by both local and remote attackers.
5
Can CVE-2004-0603 allow remote code execution?
Yes, CVE-2004-0603 can allow remote attackers to execute arbitrary commands on affected systems.