Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2004-0970

The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367.

  • Published: Feb 9, 2005
  • Updated: Nov 9, 2025
  • CVE: CVE-2004-0970
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:L/AC:L/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Software From Fixed in
gnu / gzip 1.2.4a 1.2.4a.x