CVE-2004-0970
The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages...
The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367.
Exploit likelihood
What each source reports
NVD Score used
The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367.
- Record
CVE-2004-0970- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367.
- Record
CVE-2004-0970- Updated
- 2026-11-02
EUVDEUVD-2004-0968 No score
The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367.
- Record
EUVD-2004-0968- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2jrh-9rrj-2f59 No score
The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages...
The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367.
- Record
GHSA-2jrh-9rrj-2f59- Updated
- 2026-11-02
OSV No score
The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367.
- Record
CVE-2004-0970- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0970 No score
The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367.
- Record
DEBIAN-CVE-2004-0970- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0970 is a low vulnerability (CVSS 2.1) in Gnu Gzip, published October 20, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in gzip 1.3.5-8.
References
exchange.xforce.ibmcloud.com/vulnerabilities/17583
securityfocus.com/bid/11288
trustix.org/errata/2004/0050
debian.org/security/2004/dsa-588
secunia.com/advisories/13131
zataz.net/adviso/ncompress-09052005.txt
nvd.nist.gov/vuln/detail/CVE-2004-0970
github.com/advisories/GHSA-2jrh-9rrj-2f59
security-tracker.debian.org/tracker/CVE-2004-0970