CVE-2004-1349: Low severity GNU gzip vulnerability
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1349?
CVE-2004-1349 is considered a moderate severity vulnerability due to its potential to allow local users to manipulate file permissions.
How do I fix CVE-2004-1349?
To fix CVE-2004-1349, users should upgrade to a version of gzip later than 1.3 that does not exhibit this vulnerable behavior.
Who is affected by CVE-2004-1349?
CVE-2004-1349 affects users of GNU gzip prior to version 1.3 and Oracle Solaris 8.
What types of exploits are possible with CVE-2004-1349?
Exploiting CVE-2004-1349 may allow local users to view or modify files they should not have access to through permission manipulation.
Is CVE-2004-1349 a local or remote vulnerability?
CVE-2004-1349 is a local vulnerability, requiring physical or local access to the affected system to exploit.