Lucene search

K
centosCentOS ProjectCESA-2007:0124
HistoryMar 23, 2007 - 10:21 p.m.

file security update

2007-03-2322:21:06
CentOS Project
lists.centos.org
35

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.049 Low

EPSS

Percentile

92.6%

CentOS Errata and Security Advisory CESA-2007:0124

The file command is used to identify a particular file according to the
type of data contained by the file.

An integer underflow flaw was found in the file utility. An attacker could
create a carefully crafted file which, if examined by a victim using the
file utility, could lead to arbitrary code execution. (CVE-2007-1536)

This issue did not affect the version of the file utility distributed with
Red Hat Enterprise Linux 2.1 or 3.

Users should upgrade to this erratum package, which contain a backported
patch to correct this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2007-March/075792.html
https://lists.centos.org/pipermail/centos-announce/2007-March/075794.html
https://lists.centos.org/pipermail/centos-announce/2007-March/075795.html
https://lists.centos.org/pipermail/centos-announce/2007-March/075796.html

Affected packages:
file

Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0124

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.049 Low

EPSS

Percentile

92.6%