CVE-2005-1228
Fixed in a distro release EPSS 4%
Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directories via a .. (dot dot) in the original filename within a compressed file.
Products: gnu gzip
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | gzip | 1.3.5-10 |
| Debian 13 | gzip | 1.3.5-10 |
| Debian 14 | gzip | 1.3.5-10 |
| Debian 3.0 | gzip | 1.3.2-3woody5 |
| Red Hat Enterprise Linux 3 | gzip | 0:1.3.3-12.rhel3 |
| Red Hat Enterprise Linux 3 | gzip-debuginfo | 0:1.3.3-12.rhel3 |
| Red Hat Enterprise Linux 4 | gzip | 0:1.3.3-15.rhel4 |
| Red Hat Enterprise Linux 4 | gzip-debuginfo | 0:1.3.3-15.rhel4 |