CVE-2004-0966: The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in...

Security readout for executives and security teams

CVE-2004-0966 is an old local file-overwrite flaw in GNU gettext helper scripts. A local user could abuse unsafe temporary file handling through symlinks. It matters mainly on legacy Unix/Linux systems, especially shared build or development hosts where untrusted local users and affected gettext scripts coexist. Exposure is most likely on legacy Linux or Unix systems with affected GNU gettext packages installed, including distributions referenced by vendor advisories. Risk rises on multi-user systems, shared build servers, or privileged automation that runs gettext tooling. Treat this as a legacy hygiene and shared-host risk. It is not internet-facing based on the supplied evidence, but affected build or multi-user systems could allow file integrity damage or privilege-adjacent impact. Prioritize remediation where old operating systems remain in service. Mitigation focus: Inventory systems with GNU gettext autopoint or gettextize installed.; Prioritize legacy multi-user and build systems for review.; Apply vendor gettext updates from the relevant distribution advisory..

Prepared

Jun 30, 2026, 02:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.