CVE-2004-0603 gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users to execute arbitrary c...
HighCVSS 10.0
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users to execute arbitrary commands, a different vulnerability than CVE-1999-1332.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU gzip | <= 1.3.3 | No fix listed |
References
- bugs.gentoo.org vendor-advisory
- GLSA-200406-18 patch vendor-advisory
- 10603 patch vdb-entry vendor-advisory
- gzip-gzexe-tmpfile(16506) vdb-entry
- Debian Security Tracker CVE-2004-0603 vendor-advisory