CVE-2001-1228 Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remotely if gzip is run on an FTP server.
HighCVSS 7.5
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remotely if gzip is run on an FTP server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU gzip | = 1.2.4 | No fix listed |
| GNU gzip | = 1.2.4a | No fix listed |
| GNU gzip | = 1.3 | No fix listed |
References
- 20011230 gzip bug w/ patch.. mailing-list patch vendor-advisory
- gzip-long-filename-bo(7882) vdb-entry
- 3712 vdb-entry