CVE-2004-1349
UnknownEPSS 0.59%
Last modified
CVE-2004-1349 is a vulnerability of currently unknown severity. gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.. EPSS estimates a 0.59% chance of exploitation in the next 30 days.
Description
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gnu | Gzip | < 1.3 |
| Oracle | Solaris | 8 |
References
- http://secunia.com/advisories/12744Not Applicable, Patch, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57600-1&searchclause=securityBroken Link, Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/635998Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/11318Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17577Third Party Advisory, VDB Entry
- http://secunia.com/advisories/12744Not Applicable, Patch, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57600-1&searchclause=securityBroken Link, Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/635998Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/11318Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17577Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2004-1349?
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
How severe is CVE-2004-1349?
Severity scoring for CVE-2004-1349 is pending analysis. The EPSS model estimates a 0.59% probability of exploitation in the next 30 days.
How do I fix CVE-2004-1349?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
Are you affected by CVE-2004-1349?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST