gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users to execute arbitrary commands, a different vulnerability than CVE-1999-1332.
References
Link | Resource |
---|---|
http://security.gentoo.org/glsa/glsa-200406-18.xml | Patch Vendor Advisory |
http://bugs.gentoo.org/show_bug.cgi?id=54890 | Vendor Advisory |
http://www.securityfocus.com/bid/10603 | Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/16506 |
Configurations
Information
Published : 2004-12-05 21:00
Updated : 2017-07-10 18:30
NVD link : CVE-2004-0603
Mitre link : CVE-2004-0603
JSON object : View
CWE
Products Affected
gnu
- gzip