PublicDate: 2005-02-09 05:00:00 UTC Candidate: CVE-2004-0970 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0970 Description: The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367. Ubuntu-Description: Notes: Priority: untriaged Discovered-by: Assigned-to: CVSS: Bugs: dapper_cscope: released (15.5+cvs20050816-1) edgy_cscope: released (15.5+cvs20050816-1) feisty_cscope: released (15.5+cvs20050816-1) devel_cscope: released (15.5+cvs20050816-1) upstream_cscope: needs-triage