Debian DSA-1181-1 : gzip - several vulnerabilities

Tavis Ormandy from the Google Security Team discovered several vulnerabilities in gzip, the GNU compression utility. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-4334 A NULL pointer dereference may lead to denial of service if gzip is used in an...

Slackware 10.0 / 10.1 / 10.2 / 8.1 / 9.0 / 9.1 / current : gzip (SSA:2006-262-01)

New gzip packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix possible security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2006-262-01. The...

RHEL 2.1 / 3 / 4 : gzip (RHSA-2006:0667)

Updated gzip packages that fix several security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gzip package contains the GNU gzip data compression program. Tavis Ormandy of the Google...

[slackware-security] gzip

New gzip packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix possible security issues. More details about the issues fixed may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2005-0758...

CVE-2006-4337

Consolidated data confirms CVE-2006-4337: In gzip 1.3.5, the LZH decompression path (make_table in unlzh.c) contains a buffer/array handling bug that enables arbitrary code execution when users decompress a crafted GZIP archive. Public reports describe a buffer overflow/stack issues in LZH code l...

[SECURITY] [DSA 1181-1] New gzip packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1181-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 19th, 2006 http://www.debian.org/security/faq -...

FreeBSD Security Advisory FreeBSD-SA-06:21.gzip

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:21.gzip Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in gzip Category: contrib Module: gzip Announced: 2006-09-19 Credits: Tavis...

CVE-2005-4337

The CVE-2005-4337 issue affects Blackboard Learning and Community Portal System on Academic Suite versions 6.3.1.424, 6.2.3.23, and earlier builds. The root cause is an authentication bypass via a modified user_id parameter and a "/" in the encoded_pw parameter, enabling remote attackers to gain ...