Paul Szabo discovered that znew, a script included in the gzip
package, creates its temporary files without taking precautions to
avoid a symlink attack (CAN-2003-0367)
The gzexe script has a similar vulnerability which was patched in an
earlier release but inadvertently reverted
For the stable distribution (woody) both problems have been fixed i ...
Vulmon