Unscored severity · published Feb 9, 2005
CVE-2004-0970
The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GZ
Gzip · Gnu
1.2.4a · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0970
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0970
secunia.com
http://secunia.com/advisories/13131
Vendor Advisory
http://www.debian.org/security/2004/dsa-588
Patch
http://www.securityfocus.com/bid/11288
www.trustix.org
http://www.trustix.org/errata/2004/0050
www.zataz.net
http://www.zataz.net/adviso/ncompress-09052005.txt
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17583
More from Gzip
8.8
CVE-2022-1271
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility
7.5
CVE-2026-41992
Global Buffer Overflow in GNU gzip
4.7
CVE-2026-41991
Predictable Temporary File in GNU gzip
–
CVE-2010-0001
Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of…
–
CVE-2009-2624
The huft_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which allows remote attackers to cause a denial of service…