CVE-2005-0758: Canonical Ubuntu Linux

Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days.

zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.

Affected products

• Canonical Ubuntu Linux: version 4.10 only; version 5.04 only
• GNU Gzip: before 1.3.5 (fixed in 1.3.5)

Published 2005-05-13. Last modified 2026-06-16.