CVE-2004-0970: Low severity gnu gzip vulnerability
The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0970?
CVE-2004-0970 is considered a moderate severity vulnerability due to its potential for local file overwrite exploits.
How do I fix CVE-2004-0970?
To fix CVE-2004-0970, update the gzip package to a version that is not affected by this vulnerability.
Who is affected by CVE-2004-0970?
Local users on systems running the vulnerable versions of the gzip package are at risk from CVE-2004-0970.
What are the impacts of CVE-2004-0970?
The primary impact of CVE-2004-0970 is that it allows local users to overwrite files through a symlink attack.
What tools are affected by CVE-2004-0970?
The tools affected by CVE-2004-0970 include gzexe, zdiff, and znew scripts in the gzip package.