CVE-2004-0603: gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of...

Security readout for executives and security teams

CVE-2004-0603 is an old gzip gzexe flaw. If creating a temporary file fails, gzexe may execute an argument instead of stopping. That can turn a utility failure into arbitrary command execution. The bundle provides no CVSS score and no evidence of active exploitation. Exposure is most likely on legacy systems still running gzip 1.3.3 or earlier with gzexe available. Modern supported Linux distributions are less likely to be exposed, but the bundle does not prove current patch status for any platform. Treat this as a legacy exposure check, not an emergency, unless old gzip packages remain in production. Command execution is serious, but the provided evidence lacks severity scoring, current exploit activity, and platform-specific patch details. Mitigation focus: Inventory systems for gzip 1.3.3 or earlier and gzexe presence.; Check Gentoo and operating-system vendor advisories for fixed gzip packages.; Upgrade gzip through supported vendor package channels where updates are available..

Prepared

Jun 30, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.