← Database

CVE-2005-0758

MEDIUM CVSS: 4.6 Published: 2005-05-13 Modified: 2026-06-16

Description

zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.

Affected Platforms

Gnu GzipCanonical Ubuntu Linux

Weakness Type

NVD-CWE-Other

References