PT-2005-1789 · Gnu+1 · Gzip+1

Sune Kloppenborg Jeppesen · Publicado 2005-05-13 · Atualizado 2019-10-16 · CVE-2005-0758

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions gzip versions prior to 1.3.5

Description The issue allows local users to execute arbitrary commands via filenames that are injected into a sed script, due to improper sanitization of arguments by zgrep in gzip.

Recommendations For versions prior to 1.3.5, update to version 1.3.5 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2005-0758

RHSA-2005:357

RHSA-2005:474

RHSA-2005_357

RHSA-2005_474

Produtos afetados

Red Hat

Gzip

Referências · 38

• http://vupen.com/english/advisories/2007/2732 · Nota
• https://redhat.com/security/data/cve/CVE-2005-0758.html · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0758 · Aviso do Fabricante
• http://ubuntu.com/usn/usn-158-1 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2005-357.html · Aviso do Fabricante
• ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc · Aviso do Fabricante
• https://redhat.com/security/data/cve/CVE-2005-0988.html · Nota
• http://secunia.com/advisories/26235 · Nota
• http://gentoo.org/security/en/glsa/glsa-200505-05.xml · Correção, Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2005-474.html · Aviso do Fabricante
• http://securityfocus.com/bid/13582 · Nota
• https://rhn.redhat.com/errata/RHSA-2005-474.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-1260.html · Nota
• https://osv.dev/vulnerability/CVE-2005-0758 · Aviso do Fabricante
• http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852 · Aviso do Fabricante