PT-2005-1789 · Gnu+1 · Gzip+1

Sune Kloppenborg Jeppesen · Published 2005-05-13 · Updated 2019-10-16 · CVE-2005-0758

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions gzip versions prior to 1.3.5

Description The issue allows local users to execute arbitrary commands via filenames that are injected into a sed script, due to improper sanitization of arguments by zgrep in gzip.

Recommendations For versions prior to 1.3.5, update to version 1.3.5 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-0758

RHSA-2005:357

RHSA-2005:474

RHSA-2005_357

RHSA-2005_474

Affected Products

Red Hat

Gzip

References · 38

• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0758 · Vendor Advisory
• http://ubuntu.com/usn/usn-158-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2005-357.html · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-474.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-0758 · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852 · Vendor Advisory
• http://fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html · Vendor Advisory
• http://openpkg.com/security/advisories/OpenPKG-SA-2007.002.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-0758 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:026 · Vendor Advisory
• ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt · Vendor Advisory
• http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0758 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2006:027 · Vendor Advisory