CVE-2004-0603 Information

Description

gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program which could allow remote attackers or local users to execute arbitrary commands a different vulnerability than CVE-1999-1332.

Reference

http://bugs.gentoo.org/show_bug.cgi?id=54890 http://security.gentoo.org/glsa/glsa-200406-18.xml http://www.securityfocus.com/bid/10603 https://exchange.xforce.ibmcloud.com/vulnerabilities/16506

Share on: