Skip to content
OpenAdvisories
Unscored DSA-308 2 CVEs

gzip - insecure temporary files

Published Jun 6, 2003 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 gzip 1.3.2-3woody1

Vulnerabilities 2

  • Unscored —
    CVE-1999-1332

    gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a s…

    gzip Debian
  • Unscored —
    CVE-2003-0367

    znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files.

    gzip Debian