Unscored severity · published Oct 4, 2004
CVE-2004-1349
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to…
–
CVSS
0.6%
EPSS
No
On KEV
Description
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GZ
Gzip · Gnu
before 1.3 · source: NVD
SO
Solaris · Oracle
8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1349
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1349
Not Applicable
http://secunia.com/advisories/12744
Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57600-1&searchclause=security
Third Party Advisory
http://www.kb.cert.org/vuls/id/635998
Broken Link
http://www.securityfocus.com/bid/11318
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17577
Not Applicable
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1654
More from Gzip
8.8
CVE-2022-1271
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility
7.5
CVE-2026-41992
Global Buffer Overflow in GNU gzip
4.7
CVE-2026-41991
Predictable Temporary File in GNU gzip
–
CVE-2010-0001
Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of…
–
CVE-2009-2624
The huft_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which allows remote attackers to cause a denial of service…