← All advisories

Unrated severityNVD Advisory· Published Jul 2, 2003· Updated Jun 16, 2026

CVE-2003-0367

CVE-2003-0367

Description

znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

GNU/Gzip
cpe:2.3:a:gnu:gzip:*:*:*:*:*:*:*:*
Range: <=1.3.5
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*
Gzip/Gzipllm-fuzzy

Patches

Vulnerability mechanics

References

5

www.debian.org/security/2003/dsa-308nvdPatchThird Party Advisory
www.openpkg.org/security/OpenPKG-SA-2003.031-gzip.htmlnvdPatchVendor Advisory
www.turbolinux.com/security/TLSA-2003-38.txtnvdPatchThird Party Advisory
www.mandriva.com/security/advisoriesnvdThird Party Advisory
www.securityfocus.com/bid/7872nvdThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.