Skip to content

CVE-2005-0758

zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to...

4.6 MediumFix available

CVE-2005-0758 is a medium vulnerability (CVSS 4.6) in Gnu Gzip, published May 13, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.53%, the 44th percentile. Fixed in bzip2 1.0.2-8.1.

zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.

Exploit likelihood

0.53%Down 1.0 points since Feb 4, 2022

What each source reports

NVD Score used 4.6

zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.

Record: CVE-2005-0758
CVSS 2.0: 4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.

Record: CVE-2005-0758
Updated: 2026-11-02

EUVDEUVD-2005-0759 No score

zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.

Record: EUVD-2005-0759
Updated: 2026-11-03

GitHub AdvisoriesGHSA-gc4q-mf7x-jrrp No score

zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to...

zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.

Record: GHSA-gc4q-mf7x-jrrp
Updated: 2026-11-02

OSV No score

zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.

Record: CVE-2005-0758
Updated: 2026-11-02

OSVDEBIAN-CVE-2005-0758 No score

zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.

Record: DEBIAN-CVE-2005-0758
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bzip2` Debian:12	before 1.0.2-8.1	1.0.2-8.1
`bzip2` Debian:13	before 1.0.2-8.1	1.0.2-8.1
`bzip2` Debian:14	before 1.0.2-8.1	1.0.2-8.1
`gzip` Debian:12	before 1.3.5-10	1.3.5-10
`gzip` Debian:13	before 1.3.5-10	1.3.5-10
`gzip` Debian:14	before 1.3.5-10	1.3.5-10
`gzip` Red Hat:enterprise_linux:3::as	before 0:1.3.3-12.rhel3	0:1.3.3-12.rhel3
`gzip-debuginfo` Red Hat:enterprise_linux:3::as	before 0:1.3.3-12.rhel3	0:1.3.3-12.rhel3
`gzip` Red Hat:enterprise_linux:3::desktop	before 0:1.3.3-12.rhel3	0:1.3.3-12.rhel3
`gzip-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:1.3.3-12.rhel3	0:1.3.3-12.rhel3

Show 44 moreShow less

Affected packages
Package	Affected	Fixed
`gzip` Red Hat:enterprise_linux:3::es	before 0:1.3.3-12.rhel3	0:1.3.3-12.rhel3
`gzip-debuginfo` Red Hat:enterprise_linux:3::es	before 0:1.3.3-12.rhel3	0:1.3.3-12.rhel3
`gzip` Red Hat:enterprise_linux:3::ws	before 0:1.3.3-12.rhel3	0:1.3.3-12.rhel3
`gzip-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:1.3.3-12.rhel3	0:1.3.3-12.rhel3
`gzip` Red Hat:enterprise_linux:4::as	before 0:1.3.3-15.rhel4	0:1.3.3-15.rhel4
`gzip-debuginfo` Red Hat:enterprise_linux:4::as	before 0:1.3.3-15.rhel4	0:1.3.3-15.rhel4
`gzip` Red Hat:enterprise_linux:4::desktop	before 0:1.3.3-15.rhel4	0:1.3.3-15.rhel4
`gzip-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:1.3.3-15.rhel4	0:1.3.3-15.rhel4
`gzip` Red Hat:enterprise_linux:4::es	before 0:1.3.3-15.rhel4	0:1.3.3-15.rhel4
`gzip-debuginfo` Red Hat:enterprise_linux:4::es	before 0:1.3.3-15.rhel4	0:1.3.3-15.rhel4
`gzip` Red Hat:enterprise_linux:4::ws	before 0:1.3.3-15.rhel4	0:1.3.3-15.rhel4
`gzip-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:1.3.3-15.rhel4	0:1.3.3-15.rhel4
`bzip2` Red Hat:enterprise_linux:3::as	before 0:1.0.2-11.EL3.4	0:1.0.2-11.EL3.4
`bzip2-debuginfo` Red Hat:enterprise_linux:3::as	before 0:1.0.2-11.EL3.4	0:1.0.2-11.EL3.4
`bzip2-devel` Red Hat:enterprise_linux:3::as	before 0:1.0.2-11.EL3.4	0:1.0.2-11.EL3.4
`bzip2-libs` Red Hat:enterprise_linux:3::as	before 0:1.0.2-11.EL3.4	0:1.0.2-11.EL3.4
`bzip2` Red Hat:enterprise_linux:3::desktop	before 0:1.0.2-11.EL3.4	0:1.0.2-11.EL3.4
`bzip2-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:1.0.2-11.EL3.4	0:1.0.2-11.EL3.4
`bzip2-devel` Red Hat:enterprise_linux:3::desktop	before 0:1.0.2-11.EL3.4	0:1.0.2-11.EL3.4
`bzip2-libs` Red Hat:enterprise_linux:3::desktop	before 0:1.0.2-11.EL3.4	0:1.0.2-11.EL3.4
`bzip2` Red Hat:enterprise_linux:3::es	before 0:1.0.2-11.EL3.4	0:1.0.2-11.EL3.4
`bzip2-debuginfo` Red Hat:enterprise_linux:3::es	before 0:1.0.2-11.EL3.4	0:1.0.2-11.EL3.4
`bzip2-devel` Red Hat:enterprise_linux:3::es	before 0:1.0.2-11.EL3.4	0:1.0.2-11.EL3.4
`bzip2-libs` Red Hat:enterprise_linux:3::es	before 0:1.0.2-11.EL3.4	0:1.0.2-11.EL3.4
`bzip2` Red Hat:enterprise_linux:3::ws	before 0:1.0.2-11.EL3.4	0:1.0.2-11.EL3.4
`bzip2-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:1.0.2-11.EL3.4	0:1.0.2-11.EL3.4
`bzip2-devel` Red Hat:enterprise_linux:3::ws	before 0:1.0.2-11.EL3.4	0:1.0.2-11.EL3.4
`bzip2-libs` Red Hat:enterprise_linux:3::ws	before 0:1.0.2-11.EL3.4	0:1.0.2-11.EL3.4
`bzip2` Red Hat:enterprise_linux:4::as	before 0:1.0.2-13.EL4.3	0:1.0.2-13.EL4.3
`bzip2-debuginfo` Red Hat:enterprise_linux:4::as	before 0:1.0.2-13.EL4.3	0:1.0.2-13.EL4.3
`bzip2-devel` Red Hat:enterprise_linux:4::as	before 0:1.0.2-13.EL4.3	0:1.0.2-13.EL4.3
`bzip2-libs` Red Hat:enterprise_linux:4::as	before 0:1.0.2-13.EL4.3	0:1.0.2-13.EL4.3
`bzip2` Red Hat:enterprise_linux:4::desktop	before 0:1.0.2-13.EL4.3	0:1.0.2-13.EL4.3
`bzip2-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:1.0.2-13.EL4.3	0:1.0.2-13.EL4.3
`bzip2-devel` Red Hat:enterprise_linux:4::desktop	before 0:1.0.2-13.EL4.3	0:1.0.2-13.EL4.3
`bzip2-libs` Red Hat:enterprise_linux:4::desktop	before 0:1.0.2-13.EL4.3	0:1.0.2-13.EL4.3
`bzip2` Red Hat:enterprise_linux:4::es	before 0:1.0.2-13.EL4.3	0:1.0.2-13.EL4.3
`bzip2-debuginfo` Red Hat:enterprise_linux:4::es	before 0:1.0.2-13.EL4.3	0:1.0.2-13.EL4.3
`bzip2-devel` Red Hat:enterprise_linux:4::es	before 0:1.0.2-13.EL4.3	0:1.0.2-13.EL4.3
`bzip2-libs` Red Hat:enterprise_linux:4::es	before 0:1.0.2-13.EL4.3	0:1.0.2-13.EL4.3
`bzip2` Red Hat:enterprise_linux:4::ws	before 0:1.0.2-13.EL4.3	0:1.0.2-13.EL4.3
`bzip2-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:1.0.2-13.EL4.3	0:1.0.2-13.EL4.3
`bzip2-devel` Red Hat:enterprise_linux:4::ws	before 0:1.0.2-13.EL4.3	0:1.0.2-13.EL4.3
`bzip2-libs` Red Hat:enterprise_linux:4::ws	before 0:1.0.2-13.EL4.3	0:1.0.2-13.EL4.3

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 53 moreShow less