CVE-2004-1349

Low

Description

gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.

SeverityLow
CVSS2.1
Exploit probability—
ProductGnu Gzip
PublishedOct 4, 2004
First seenOct 4, 2004

How to fix

Update
  • gnu gzip1.3 or later

Affected products

ProductAffected versionsFixed in
gnu gzipv < 1.31.3
oracle solaris8—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.