CVE-2005-0758 zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.
MediumCVSS 4.6
EPSS 0.53%
- Published
- Updated
- Exploit status
- No public exploit known
Description
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU gzip | < 1.3.5 | 1.3.5 |
| Canonical Ubuntu Linux | = 4.10 | No fix listed |
| Canonical Ubuntu Linux | = 5.04 | No fix listed |
| debian/bzip2(Debian:12) | < 1.0.2-8.1 | 1.0.2-8.1 |
| debian/bzip2(Debian:13) | < 1.0.2-8.1 | 1.0.2-8.1 |
| debian/bzip2(Debian:14) | < 1.0.2-8.1 | 1.0.2-8.1 |
| debian/gzip(Debian:12) | < 1.3.5-10 | 1.3.5-10 |
| debian/gzip(Debian:13) | < 1.3.5-10 | 1.3.5-10 |
| debian/gzip(Debian:14) | < 1.3.5-10 | 1.3.5-10 |
References
- bugs.gentoo.org third-party-advisory
- docs.info.apple.com third-party-advisory
- APPLE-SA-2007-07-31 mailing-list third-party-advisory vendor-advisory
- RHSA-2005:357 third-party-advisory vendor-advisory
- 18100 third-party-advisory
- 19183 third-party-advisory
- 22033 third-party-advisory
- 26235 third-party-advisory
- 1013928 third-party-advisory vdb-entry
- SSA:2006-262 third-party-advisory vendor-advisory
- FLSA:158801 broken-link permissions-required vendor-advisory
- GLSA-200505-05 patch third-party-advisory vendor-advisory
- MDKSA-2006:026 third-party-advisory vendor-advisory
- MDKSA-2006:027 third-party-advisory vendor-advisory
- OpenPKG-SA-2007.002 third-party-advisory vendor-advisory
- 16371 broken-link vdb-entry
- RHSA-2005:474 third-party-advisory vendor-advisory
- 13582 third-party-advisory vdb-entry
- 25159 third-party-advisory vdb-entry
- USN-158-1 third-party-advisory vendor-advisory
- ADV-2007-2732 third-party-advisory vdb-entry
- gzip-zgrep-file-installation(20539) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:1081 signature third-party-advisory vdb-entry
- oval:org.mitre.oval:def:1107 signature third-party-advisory vdb-entry
- oval:org.mitre.oval:def:9797 signature third-party-advisory vdb-entry
- Debian Security Tracker CVE-2005-0758 vendor-advisory
- bugs.debian.org issue-tracking