Oracle Solaris Critical Patch Update : jan2016_SRU11_3_0_0_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: NDMP Backup Service. The supported version that is affected is 11. Easily exploitable vulnerability requiring logon t...

PT-2016-1073

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris version 11 Description The issue is related to errors in the code of the System Archive Utility component of the Solaris operating system. It may allow a remote attacker to modify, add, or delete data using network packets,...

CVE-2014-6470

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Archive Utility...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Archive Utility...

CVE-2014-6470

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Archive Utility...

CVE-2014-6470

This CVE-2014-6470 refers to a local privilege escalation in Oracle Solaris 11 Archive Utility. The connected Nessus/CPL data indicates the vulnerability affects the Archive Utility component of Solaris 11, with a root cause described as an easily exploitable flaw that requires user login to the ...

CVE-2014-6470: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Archive Utility...

PT-2014-7236

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris version 11 Description The issue affects confidentiality, integrity, and availability. It is related to the Archive Utility, but the specific vectors are unknown. Recommendations For Oracle Sun Solaris version 11, at the...

WinArchiver 3.2 SEH Buffer Overflow Vulnerability

WinArchiver version 3.2 suffers from a SEH-based buffer overflow vulnerability. Title: SEH BUFFER OVERFLOW IN WINARCHIVER V.3.2 Severity: Critical History: 24.Apr.2013 Vulnerability reported Authors: Josep Pi Rodriguez, Pedro Guillen Nuñez , Miguel Angel de Castro Simon Organization: RealPentesti...

LHA Arbitrary Command Execution Vulnerability with Shell Metacharacter in Directory Name

Overview LHA is vulnerable to arbitrary command execution due to improper handling of directory names cantaining shell metacharacters. Impact An remote attacker could execute arbitrary command. Solution Please refer to the 'Vendor Information' section for official remediation and take appropriate...

RHEL 2.1 / 3 : zip (RHSA-2004:634)

An updated zip package that fixes a buffer overflow vulnerability is now available. The zip program is an archiving utility which can create ZIP-compatible archives. A buffer overflow bug has been discovered in zip when handling long file names. An attacker could create a specially crafted path...

security flaw

Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771. NOTE: this issue may be REJECTED if there are not any case...

security flaw

Buffer overflow in the extractone function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w working directory command line option, a different issue than CVE-2004-0769. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise...