107 matches found
Low: Red Hat Bug Fix Advisory: unzip bug fix update
Updated unzip packages that address various bugs are now available. The unzip utility is used to list, test, or extract files from a zip archive. This update addresses the following issues: a TOCTOU bug that could be exploited to change file permissions CVE-2005-2475 a long filename buffer overfl...
RHEL 4 : unzip (RHSA-2007:0203)
Updated unzip packages that fix two security issues and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The unzip utility is used to list, test, or extract files from a zip archive. A race condition was found in Unzip...
Low: Red Hat Security Advisory: unzip security and bug fix update
Updated unzip packages that fix two security issues and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The unzip utility is used to list, test, or extract files from a zip archive. A race condition was found in Unzip...
CVE-2006-4667
CVE-2006-4667 concerns RunCMS 1.4.1, where multiple SQL injection flaws allow remote attackers to inject arbitrary SQL via (1) uid in class/sessions.class.php and (2) timezone_offset and (3) umode in class/xoopsuser.php. The NVD entry documents these specific parameters as the attack surface, wit...
CVE-2005-4667
CVE-2005-4667 is a vulnerability in the unzip utility where a buffer overflow can occur in command line argument handling (long filename) that could allow arbitrary code execution. The issue is reported in Unzip 5.50 and earlier and is exploitable when unzip processes crafted long file name argum...
