CVE-2005-0758
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to...
4.6 MediumFix available
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.
Exploit likelihood
0.53%Down 1.0 points since Feb 4, 2022
What each source reports
NVD Score used
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.
- Record
CVE-2005-0758- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.
- Record
CVE-2005-0758- Updated
- 2026-11-02
EUVDEUVD-2005-0759No score
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.
- Record
EUVD-2005-0759- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gc4q-mf7x-jrrpNo score
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to...
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.
- Record
GHSA-gc4q-mf7x-jrrp- Updated
- 2026-11-02
OSVNo score
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.
- Record
CVE-2005-0758- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-0758No score
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.
- Record
DEBIAN-CVE-2005-0758- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bzip2Debian:12 | before 1.0.2-8.1 | 1.0.2-8.1 |
bzip2Debian:13 | before 1.0.2-8.1 | 1.0.2-8.1 |
bzip2Debian:14 | before 1.0.2-8.1 | 1.0.2-8.1 |
gzipDebian:12 | before 1.3.5-10 | 1.3.5-10 |
gzipDebian:13 | before 1.3.5-10 | 1.3.5-10 |
gzipDebian:14 | before 1.3.5-10 | 1.3.5-10 |
gzipRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:1.3.3-12.rhel3 | 0:1.3.3-12.rhel3 |
gzip-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:1.3.3-12.rhel3 | 0:1.3.3-12.rhel3 |
gzipRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:1.3.3-12.rhel3 | 0:1.3.3-12.rhel3 |
gzip-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:1.3.3-12.rhel3 | 0:1.3.3-12.rhel3 |
Show 44 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gzipRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:1.3.3-12.rhel3 | 0:1.3.3-12.rhel3 |
gzip-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:1.3.3-12.rhel3 | 0:1.3.3-12.rhel3 |
gzipRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:1.3.3-12.rhel3 | 0:1.3.3-12.rhel3 |
gzip-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:1.3.3-12.rhel3 | 0:1.3.3-12.rhel3 |
gzipRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:1.3.3-15.rhel4 | 0:1.3.3-15.rhel4 |
gzip-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:1.3.3-15.rhel4 | 0:1.3.3-15.rhel4 |
gzipRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:1.3.3-15.rhel4 | 0:1.3.3-15.rhel4 |
gzip-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:1.3.3-15.rhel4 | 0:1.3.3-15.rhel4 |
gzipRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:1.3.3-15.rhel4 | 0:1.3.3-15.rhel4 |
gzip-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:1.3.3-15.rhel4 | 0:1.3.3-15.rhel4 |
gzipRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:1.3.3-15.rhel4 | 0:1.3.3-15.rhel4 |
gzip-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:1.3.3-15.rhel4 | 0:1.3.3-15.rhel4 |
bzip2Red Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:1.0.2-11.EL3.4 | 0:1.0.2-11.EL3.4 |
bzip2-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:1.0.2-11.EL3.4 | 0:1.0.2-11.EL3.4 |
bzip2-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:1.0.2-11.EL3.4 | 0:1.0.2-11.EL3.4 |
bzip2-libsRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs | before 0:1.0.2-11.EL3.4 | 0:1.0.2-11.EL3.4 |
bzip2Red Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:1.0.2-11.EL3.4 | 0:1.0.2-11.EL3.4 |
bzip2-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:1.0.2-11.EL3.4 | 0:1.0.2-11.EL3.4 |
bzip2-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:1.0.2-11.EL3.4 | 0:1.0.2-11.EL3.4 |
bzip2-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs | before 0:1.0.2-11.EL3.4 | 0:1.0.2-11.EL3.4 |
bzip2Red Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:1.0.2-11.EL3.4 | 0:1.0.2-11.EL3.4 |
bzip2-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:1.0.2-11.EL3.4 | 0:1.0.2-11.EL3.4 |
bzip2-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:1.0.2-11.EL3.4 | 0:1.0.2-11.EL3.4 |
bzip2-libsRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs | before 0:1.0.2-11.EL3.4 | 0:1.0.2-11.EL3.4 |
bzip2Red Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:1.0.2-11.EL3.4 | 0:1.0.2-11.EL3.4 |
bzip2-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:1.0.2-11.EL3.4 | 0:1.0.2-11.EL3.4 |
bzip2-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:1.0.2-11.EL3.4 | 0:1.0.2-11.EL3.4 |
bzip2-libsRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs | before 0:1.0.2-11.EL3.4 | 0:1.0.2-11.EL3.4 |
bzip2Red Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:1.0.2-13.EL4.3 | 0:1.0.2-13.EL4.3 |
bzip2-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:1.0.2-13.EL4.3 | 0:1.0.2-13.EL4.3 |
bzip2-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:1.0.2-13.EL4.3 | 0:1.0.2-13.EL4.3 |
bzip2-libsRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:1.0.2-13.EL4.3 | 0:1.0.2-13.EL4.3 |
bzip2Red Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:1.0.2-13.EL4.3 | 0:1.0.2-13.EL4.3 |
bzip2-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:1.0.2-13.EL4.3 | 0:1.0.2-13.EL4.3 |
bzip2-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:1.0.2-13.EL4.3 | 0:1.0.2-13.EL4.3 |
bzip2-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:1.0.2-13.EL4.3 | 0:1.0.2-13.EL4.3 |
bzip2Red Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:1.0.2-13.EL4.3 | 0:1.0.2-13.EL4.3 |
bzip2-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:1.0.2-13.EL4.3 | 0:1.0.2-13.EL4.3 |
bzip2-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:1.0.2-13.EL4.3 | 0:1.0.2-13.EL4.3 |
bzip2-libsRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:1.0.2-13.EL4.3 | 0:1.0.2-13.EL4.3 |
bzip2Red Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:1.0.2-13.EL4.3 | 0:1.0.2-13.EL4.3 |
bzip2-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:1.0.2-13.EL4.3 | 0:1.0.2-13.EL4.3 |
bzip2-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:1.0.2-13.EL4.3 | 0:1.0.2-13.EL4.3 |
bzip2-libsRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:1.0.2-13.EL4.3 | 0:1.0.2-13.EL4.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0758 is a medium vulnerability (CVSS 4.6) in Gnu Gzip, published May 13, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.53%, the 45th percentile. Fixed in bzip2 1.0.2-8.1.
References
ubuntu.com/usn/usn-158-1
osvdb.org/16371
fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html
vupen.com/english/advisories/2007/2732
mandriva.com/security/advisories?name=MDKSA-2006:027
secunia.com/advisories/22033
Show 53 moreShow less
rhn.redhat.com/errata/RHSA-2005-357.html
lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
openpkg.com/security/advisories/OpenPKG-SA-2007.002.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9797
exchange.xforce.ibmcloud.com/vulnerabilities/20539
docs.info.apple.com/article.html?artnum=306172
gentoo.org/security/en/glsa/glsa-200505-05.xml
securityfocus.com/bid/25159
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852
securitytracker.com/id?1013928
redhat.com/support/errata/RHSA-2005-474.html
bugs.gentoo.org/show_bug.cgi?id=90626
nvd.nist.gov/vuln/detail/CVE-2005-0758
github.com/advisories/GHSA-gc4q-mf7x-jrrp
security-tracker.debian.org/tracker/CVE-2005-0758
access.redhat.com/errata/RHSA-2005:357
bugzilla.redhat.com/show_bug.cgi?id=121514
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_357.json
cve.org/CVERecord?id=CVE-2005-0758
scary.beasts.org/security/CESA-2005-002.txt