RedHatRHSA-2007:0391(RHSA-2007:0391) Moderate: file security update
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.036 Low
EPSS
Percentile
90.6%
The file command is used to identify a particular file according to the
type of data contained by the file.
The fix for CVE-2007-1536 introduced a new integer underflow flaw in the
file utility. An attacker could create a carefully crafted file which, if
examined by a victim using the file utility, could lead to arbitrary code
execution. (CVE-2007-2799)
This issue did not affect the version of the file utility distributed with
Red Hat Enterprise Linux 2.1 or 3.
Users should upgrade to this erratum package, which contain a backported
patch to correct this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 4 | x86_64 | file | <ย 4.10-3.0.2.el4 | file-4.10-3.0.2.el4.x86_64.rpm |
| RedHat | 4 | i386 | file | <ย 4.10-3.0.2.el4 | file-4.10-3.0.2.el4.i386.rpm |
| RedHat | 4 | ia64 | file | <ย 4.10-3.0.2.el4 | file-4.10-3.0.2.el4.ia64.rpm |
| RedHat | 4 | ppc | file | <ย 4.10-3.0.2.el4 | file-4.10-3.0.2.el4.ppc.rpm |
| RedHat | 5 | ia64 | file | <ย 4.17-9.0.1.el5 | file-4.17-9.0.1.el5.ia64.rpm |
| RedHat | 5 | x86_64 | file | <ย 4.17-9.0.1.el5 | file-4.17-9.0.1.el5.x86_64.rpm |
| RedHat | 4 | s390 | file | <ย 4.10-3.0.2.el4 | file-4.10-3.0.2.el4.s390.rpm |
| RedHat | 5 | src | file | <ย 4.17-9.0.1.el5 | file-4.17-9.0.1.el5.src.rpm |
| RedHat | 4 | s390x | file | <ย 4.10-3.0.2.el4 | file-4.10-3.0.2.el4.s390x.rpm |
| RedHat | 5 | i386 | file | <ย 4.17-9.0.1.el5 | file-4.17-9.0.1.el5.i386.rpm |
Related
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.036 Low
EPSS
Percentile
90.6%