CVE-2004-1349: GNU Gzip

Low severity, CVSS 2.1. EPSS: 0.6% chance of exploitation in the next 30 days.

gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.

Affected products

• GNU Gzip: before 1.3 (fixed in 1.3)
• Oracle Solaris: version 8 only

Published 2004-10-04. Last modified 2026-06-16.