CVE-2009-1372

Summary: CVE-2009-1372 is a stack-based buffer overflow in ClamAV’s libclamav/phishcheck.c:cli_url_canon, before version 0.95.1. The vulnerability could allow a remote attacker to crash the application and potentially execute arbitrary code via a crafted URL. Multiple advisories and RH/OpenVAS/Ne...

CVE-2009-1372

Stack-based buffer overflow in the cliurlcanon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted URL...

Mandriva Update for bzip2 MDVSA-2008:075 (bzip2)

Check for the Version of bzip2 OpenVAS Vulnerability Test Mandriva Update for bzip2 MDVSA-2008:075 bzip2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

GLSA-200903-40 : Analog: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200903-40 Analog: Denial of Service Diego E. Petteno reported that the Analog package in Gentoo is built with its own copy of bzip2, making it vulnerable to CVE-2008-1372 GLSA 200804-02. Impact : A local attacker could place...

Analog: Denial of service

Background Analog is a a webserver log analyzer. Description Diego E. Petteno reported that the Analog package in Gentoo is built with its own copy of bzip2, making it vulnerable to CVE-2008-1372 GLSA 200804-02. Impact A local attacker could place specially crafted log files into a log directory...

CentOS Update for bzip2 CESA-2008:0893 centos3 x86_64

Check for the Version of bzip2 OpenVAS Vulnerability Test CentOS Update for bzip2 CESA-2008:0893 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for bzip2 FEDORA-2008-3037

Check for the Version of bzip2 OpenVAS Vulnerability Test Fedora Update for bzip2 FEDORA-2008-3037 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for bzip2 FEDORA-2008-2970

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SOL9592 - bzip2 vulnerability CVE-2008-1372

Information about this advisory is available at the following location: Note: This link takes you to a resource outside of AskF5, and it is possible that the information may be removed without our knowledge. F5 Product Development tracked this issue as CR114442 and CR107644 for BIG-IP LTM, GTM...

Gentoo Security Advisory GLSA 200804-02 (bzip2)

The remote host is missing updates announced in advisory GLSA 200804-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 2.1 / 3 / 4 / 5 : bzip2 (RHSA-2008:0893)

Updated bzip2 packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Bzip2 is a freely available, high-quality data compressor. It provides both...

Moderate: Red Hat Security Advisory: bzip2 security update

Updated bzip2 packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Bzip2 is a freely available, high-quality data compressor. It provides both...

bzip2 security update

1.0.3-4 - Resolves: 461587 fix cash on malformed archive file - CVE-2008-1372 apply upstream patch...

FreeBSD Ports: bzip2

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SuSE 10 Security Update : bzip2 (ZYPP Patch Number 5114)

Specially crafted files could crash the bzip2-decoder. CVE-2008-1372 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid32212; scriptversion"1.17";...

openSUSE 10 Security Update : bzip2 (bzip2-5112)

Specially crafted files could crash the bzip2-decoder CVE-2008-1372. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update bzip2-5112. The text description of this plugin is C SUSE LLC...

Fedora 8 : bzip2-1.0.4-13.fc8 (2008-2970)

This update fixes bzip2 denial of service crash on malformed archives - CVE-2008-1372, 438118. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possibl...

CVE-2008-1372

bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service crash via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats...

CVE-2008-1372

bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service crash via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats...

CVE-2008-1372

CVE-2008-1372 affects bzip2: the buffer over-read vulnerability exists in the decompression routine of libbz2 prior to version 1.0.5, allowing a user-assisted remote attacker to trigger a crash via a crafted archive. The issue is a denial-of-service on vulnerable targets when processing malformed...