// For flags

CVE-2005-1228

Gentoo Linux Security Advisory 200505-5

Severity Score

7.5
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directories via a .. (dot dot) in the original filename within a compressed file.

The gzip and gunzip programs are vulnerable to a race condition when setting file permissions (CVE-2005-0988), as well as improper handling of filename restoration (CVE-2005-1228). The zgrep utility improperly sanitizes arguments, which may come from an untrusted source (CVE-2005-0758). Versions less than 1.3.5-r6 are affected.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2005-04-22 CVE Reserved
  • 2005-04-22 CVE Published
  • 2024-08-07 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
References (22)
URL Tag Source
http://marc.info/?l=bugtraq&m=111402732406477&w=2 Mailing List
http://secunia.com/advisories/18100 Third Party Advisory
http://secunia.com/advisories/21253 Third Party Advisory
http://secunia.com/advisories/22033 Third Party Advisory
http://www.osvdb.org/15721 Vdb Entry
http://www.securityfocus.com/bid/19289 Vdb Entry
http://www.us-cert.gov/cas/techalerts/TA06-214A.html Third Party Advisory
http://www.vupen.com/english/advisories/2006/3101 Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/20199 Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11057 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A170 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A382 Signature
URL Date SRC
URL Date SRC
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=305255 2017-10-11
URL Date SRC
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt 2017-10-11
http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html 2017-10-11
http://rhn.redhat.com/errata/RHSA-2005-357.html 2017-10-11
http://secunia.com/advisories/15047 2017-10-11
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852 2017-10-11
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101816-1 2017-10-11
http://www.debian.org/security/2005/dsa-752 2017-10-11
https://access.redhat.com/security/cve/CVE-2005-1228 2005-06-13
https://bugzilla.redhat.com/show_bug.cgi?id=1617616 2005-06-13
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Gnu
Search vendor "Gnu"
 Gzip
Search vendor "Gnu" for product "Gzip"
 1.2.4
Search vendor "Gnu" for product "Gzip" and version "1.2.4"
-
Affected
Gnu
Search vendor "Gnu"
 Gzip
Search vendor "Gnu" for product "Gzip"
 1.3.3
Search vendor "Gnu" for product "Gzip" and version "1.3.3"
-
Affected