RedHatRHSA-2007:0124(RHSA-2007:0124) Moderate: file security update
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.036 Low
EPSS
Percentile
90.6%
The file command is used to identify a particular file according to the
type of data contained by the file.
An integer underflow flaw was found in the file utility. An attacker could
create a carefully crafted file which, if examined by a victim using the
file utility, could lead to arbitrary code execution. (CVE-2007-1536)
This issue did not affect the version of the file utility distributed with
Red Hat Enterprise Linux 2.1 or 3.
Users should upgrade to this erratum package, which contain a backported
patch to correct this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 5 | ia64 | file | < 4.17-9.el5 | file-4.17-9.el5.ia64.rpm |
| RedHat | 5 | x86_64 | file | < 4.17-9.el5 | file-4.17-9.el5.x86_64.rpm |
| RedHat | any | x86_64 | file | < 4.10-3.EL4.5 | file-4.10-3.EL4.5.x86_64.rpm |
| RedHat | any | src | file | < 4.10-3.EL4.5 | file-4.10-3.EL4.5.src.rpm |
| RedHat | 5 | ppc | file | < 4.17-9.el5 | file-4.17-9.el5.ppc.rpm |
| RedHat | 5 | i386 | file | < 4.17-9.el5 | file-4.17-9.el5.i386.rpm |
| RedHat | any | ia64 | file | < 4.10-3.EL4.5 | file-4.10-3.EL4.5.ia64.rpm |
| RedHat | any | i386 | file | < 4.10-3.EL4.5 | file-4.10-3.EL4.5.i386.rpm |
| RedHat | any | s390 | file | < 4.10-3.EL4.5 | file-4.10-3.EL4.5.s390.rpm |
| RedHat | 5 | src | file | < 4.17-9.el5 | file-4.17-9.el5.src.rpm |
Related
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.036 Low
EPSS
Percentile
90.6%