CVE-2003-0367
Fixed in a distro release EPSS <1%
znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Products: gnu gzip, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | gzip | 1.3.5-6 |
| Debian 13 | gzip | 1.3.5-6 |
| Debian 14 | gzip | 1.3.5-6 |
| Debian 3.0 | gzip | 1.3.2-3woody1 |