CVE-2004-0970: The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncomp...

Security readout for executives and security teams

CVE-2004-0970 is an old local file-overwrite flaw in gzip helper scripts, including gzexe, zdiff, and znew. A local user could abuse unsafe temporary-file handling with symlinks to overwrite files. Business risk is mainly for legacy Unix/Linux systems where vulnerable packages remain installed and local users have shell access. Exposure is most likely on legacy Linux or Unix systems retaining vulnerable gzip or ncompress packages. The bundle identifies scripts and package families, but not specific versions. Systems without local untrusted users, or where affected scripts are absent or patched, have lower practical exposure. Treat this as a legacy hygiene issue unless vulnerable systems are still multi-user or privileged automation invokes the scripts. Prioritize patching or removing affected packages on older servers, shared environments, and unsupported operating systems. Mitigation focus: Check OS vendor advisories for gzip and ncompress updates.; Apply supported distribution security updates for affected packages.; Remove unused legacy packages or helper scripts where operationally safe..

Prepared

Jun 30, 2026, 02:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.