CVE-2005-1228: Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write...

Security readout for executives and security teams

CVE-2005-1228 is a legacy gzip issue where a crafted compressed file can make gunzip write output outside the intended directory when filename restoration is used. The business risk is highest where old systems automatically unpack files from outside parties. Likely exposure is limited to legacy systems running affected gzip versions, especially mail gateways, file-transfer workflows, backup restores, or ingestion jobs that decompress untrusted gzip files with filename preservation enabled. Treat as a legacy exposure cleanup item with focused urgency for automated file-processing environments. It is not KEV-listed in the bundle, but arbitrary file write can become serious when decompression runs with privileged service accounts. Mitigation focus: Apply vendor gzip security updates for affected operating systems.; Check vendor advisories before assuming a specific fixed version.; Avoid processing untrusted gzip files with gunzip -N until remediated..

Prepared

Jun 29, 2026, 22:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.