openSUSE 10 Security Update : gzip (gzip-2084)

This update fixes several security problems that can be exploited to compromise the system in conjunction with other programs while processing malformated archive files. CVE-2006-4334,CVE-2006-4335,CVE-2006-4336,CVE-2006-4337,CVE -2006-4338 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2007-4335

WinGate (Qbik WinGate) SMTP server before 6.2.2 is vulnerable to a remote denial-of-service due to a format-string vulnerability in its error-logging path. Affected products are WinGate 5.x and 6.x prior to 6.2.2; exploitation can crash the service by sending certain unexpected commands that trig...

Fedora Core 5 : lha-1.14i-20 (2007-557)

Thu May 31 2007 Tomas Smetana - 1.14i-20 - fix 220596 CVE-2006-4335/7/8 multiple vulnerabilities in lha Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...

CVE-2007-2966

Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted LHA archive, related to an integer wrap, a similar issu...

Security fix for the ALT Linux 6 package lha version 2:1.14i-alt2

April 15, 2007 Michael Shigorin 2:1.14i-alt2 - ac20050924p1: security fixes for CVE-2006-4335, CVE-2006-4337, CVE-2006-4338 DoS, system access - removed patch1, patch2, patch4, patch5 didn't apply...

Mandrake Linux Security Advisory : gzip (MDKSA-2006:167)

NULL Dereference CVE-2006-4334 A stack modification vulnerability where a stack buffer can be modified out of bounds, but not in the traditional stack overrun sense exists in the LZH decompression support of gzip. CVE-2006-4335 A .bss buffer underflow exists in gzip's pack support, where a loop...

Debian DSA-1181-1 : gzip - several vulnerabilities

Tavis Ormandy from the Google Security Team discovered several vulnerabilities in gzip, the GNU compression utility. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-4334 A NULL pointer dereference may lead to denial of service if gzip is used in an...

Slackware 10.0 / 10.1 / 10.2 / 8.1 / 9.0 / 9.1 / current : gzip (SSA:2006-262-01)

New gzip packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix possible security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2006-262-01. The...

RHEL 2.1 / 3 / 4 : gzip (RHSA-2006:0667)

Updated gzip packages that fix several security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gzip package contains the GNU gzip data compression program. Tavis Ormandy of the Google...

[slackware-security] gzip

New gzip packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix possible security issues. More details about the issues fixed may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2005-0758...

CVE-2006-4335

The CVE-2006-4335 issue affects gzip 1.3.5, specifically the LZH decompression code (unlzh.c make_table), where an array index/out-of-bounds handling on certain platforms can cause a crash or arbitrary code execution via a crafted GZIP archive. Public advisories describe a stack modification/boun...

[SECURITY] [DSA 1181-1] New gzip packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1181-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 19th, 2006 http://www.debian.org/security/faq -...

FreeBSD Security Advisory FreeBSD-SA-06:21.gzip

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:21.gzip Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in gzip Category: contrib Module: gzip Announced: 2006-09-19 Credits: Tavis...

CVE-2005-4335

ProjectForum 4.7.0 and earlier is affected by a denial-of-service vulnerability triggered by a crafted pageid parameter in admin/versions.html. The entry states remote attackers can crash the application, with CVSS v2 base score 7.8 (HIGH) and network-based vector (AV:N/AC:L/Au:N/C:N/I:N/A:C). Th...