CVE-2004-1349
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the...
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
Exploit likelihood
What each source reports
NVD Score used
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
- Record
CVE-2004-1349- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-269
- Updated
- 2026-11-02
CVE List No score
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
- Record
CVE-2004-1349- Updated
- 2026-11-02
EUVDEUVD-2004-1346 No score
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
- Record
EUVD-2004-1346- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2575-c77r-rr97 No score
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the...
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
- Record
GHSA-2575-c77r-rr97- Weakness
- CWE-269
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1349 is a low vulnerability (CVSS 2.1) in Gnu Gzip, published October 4, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.59%, the 48th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/17577
sunsolve.sun.com/search/document.do?assetkey=1-26-57600-1&searchclause=security
kb.cert.org/vuls/id/635998
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1654
securityfocus.com/bid/11318
secunia.com/advisories/12744
nvd.nist.gov/vuln/detail/CVE-2004-1349
github.com/advisories/GHSA-2575-c77r-rr97