CVE-2005-0758: Medium severity GNU gzip vulnerability
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0758?
CVE-2005-0758 is considered a medium severity vulnerability due to the potential for local users to execute arbitrary commands.
How do I fix CVE-2005-0758?
To fix CVE-2005-0758, you should upgrade to a version of gzip that is 1.3.5 or higher.
Who is affected by CVE-2005-0758?
CVE-2005-0758 affects users of gzip versions prior to 1.3.5 on various Linux distributions, including specific versions of Ubuntu.
What are the consequences of exploiting CVE-2005-0758?
Exploiting CVE-2005-0758 could allow an attacker to execute arbitrary commands on a local system, which could lead to further compromises.
Is CVE-2005-0758 specific to any particular operating system?
CVE-2005-0758 is not specific to one operating system; it affects GNU gzip used in various Linux distributions, notably Ubuntu.