znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS Score
2.1
EPSS Score
0.004
Published
2003-07-02
Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remotely if gzip is run on an FTP server.
CVSS Score
7.5
EPSS Score
0.031
Published
2001-11-18
Page 2