CVE-2004-1349 gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these f...
LowCVSS 2.1
EPSS 0.59%
- Published
- Updated
- Exploit status
- No public exploit known
Description
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU gzip | < 1.3 | 1.3 |
| oracle solaris | = 8 | No fix listed |
References
- 12744 not-applicable patch third-party-advisory vendor-advisory
- 57600 broken-link patch vendor-advisory
- VU#635998 third-party-advisory us-government-resource
- 11318 broken-link patch third-party-advisory vdb-entry vendor-advisory
- solaris-gzip-modify-privileges(17577) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:1654 not-applicable signature vdb-entry
- Debian Security Tracker CVE-2004-1349 vendor-advisory