CVE-2007-3375: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrary code via a crafted LZH archive, as exploited by malware such as Trojan.Lhdropper...

Power Archiver buffer overflow

Buffer overflow on parsing .ISO files...

LHAZ archiver buffer overflow

Buffer overflow on oversized filename during JZH archives parsing...

PicoZip zipinfo.dll buffer overflow

Buffer overflow on oversized filenames in different archivers formats...

Slackware 10.2 / current : zoo archiver overflow (SSA:2006-142-02)

New bin packages are available for Slackware 10.2 and -current to fix a security issue with the zoo archive program. A non-security- related upgrade to the newest version of 'eject' was also done. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

[slackware-security] zoo archiver overflow

New bin packages are available for Slackware 10.2 and -current to fix a security issue with the zoo archive program. A non-security- related upgrade to the newest version of "eject" was also done. Here are the details from the Slackware 10.2 ChangeLog: patches/packages/bin-10.2-i486-210.2.tgz:...

FreeBSD : zoo -- stack based buffer overflow (d9307a41-c4d7-11da-b2fb-000e0c2e438a)

Jean-Sebastien Guay-Leroux report a vulnerability within the zoo archiver. The vulnerability which is present in the fullpath function from the misc.c file is caused by improper checking of user supplied data. The data returned to the buffer can be up to 512 bytes, while the buffer is created to...

SpeedProject multiple archiver buffer overflow

Buffer overflows on ZIP, ACE and UUEncode formats parsing...

CVE-2006-2006

Multiple directory traversal vulnerabilities in IZArc Archiver 3.5 beta 3 allow remote attackers to write arbitrary files via a ..\ dot dot backslash in a 1 .rar, 2 .tar, 3 .zip, 4 .jar, or 5 .gz archive. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2006-2006

CVE-2006-2006 concerns IZArc Archiver 3.5 beta 3, with multiple directory traversal vulnerabilities in its archive extraction handling. An attacker can exploit a crafted archive (types .rar, .tar, .zip, .jar, or .gz) by using a ..\ path to write arbitrary files on the affected system, enabling re...

CVE-2006-2006

Multiple directory traversal vulnerabilities in IZArc Archiver 3.5 beta 3 allow remote attackers to write arbitrary files via a ..\ dot dot backslash in a 1 .rar, 2 .tar, 3 .zip, 4 .jar, or 5 .gz archive. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2006-2006: Undefined Security Weakness

Multiple directory traversal vulnerabilities in IZArc Archiver 3.5 beta 3 allow remote attackers to write arbitrary files via a ..\ dot dot backslash in a 1 .rar, 2 .tar, 3 .zip, 4 .jar, or 5 .gz archive. NOTE: the provenance of this information is unknown; the details are obtained solely from...

Directory traversal

Directory traversal vulnerability in KGB Archiver before 1.1.5.22 allows remote attackers to overwrite arbitrary files wile decompressing an archive, possibly due to directory traversal sequences in a filename...

CVE-2006-1611

Directory traversal vulnerability in KGB Archiver before 1.1.5.22 allows remote attackers to overwrite arbitrary files wile decompressing an archive, possibly due to directory traversal sequences in a filename...

CVE-2006-1611

Directory traversal vulnerability in KGB Archiver before 1.1.5.22 allows remote attackers to overwrite arbitrary files wile decompressing an archive, possibly due to directory traversal sequences in a filename...

CVE-2006-1611

CVE-2006-1611 concerns a directory traversal vulnerability in KGB Archiver prior to 1.1.5.22. The flaw allows remote attackers to overwrite arbitrary files during decompression, likely due to directory traversal sequences in filenames. The available sources (NVD entry) describe the affected softw...

[Full-disclosure] Barracuda LHA archiver security bug leads to remote compromise

Topic: Barracuda LHA archiver security bug leads to remote compromise Announced: 2006-04-03 Product: Barracuda Spam Firewall Vendor: http://www.barracudanetworks.com/ Impact: Remote shell access Affected product: Barracuda with firmware 3.3.03.022 AND spamdef 3.0.10045 Credits: Jean-Sebastien...

CVE-2006-1611: Undefined Security Weakness

Directory traversal vulnerability in KGB Archiver before 1.1.5.22 allows remote attackers to overwrite arbitrary files wile decompressing an archive, possibly due to directory traversal sequences in a filename...

[SA19511] KGB Archiver Directory Traversal Vulnerability

TITLE: KGB Archiver Directory Traversal Vulnerability SECUNIA ADVISORY ID: SA19511 VERIFY ADVISORY: http://secunia.com/advisories/19511/ CRITICAL: Less critical IMPACT: System access WHERE: From remote SOFTWARE: KGB Archiver 1.x http://secunia.com/product/7033/ DESCRIPTION: A vulnerability has be...

zoo -- stack based buffer overflow

Jean-Sébastien Guay-Leroux report a vulnerability within the zoo archiver. The vulnerability which is present in the fullpath function from the misc.c file is caused by improper checking of user supplied data. The data returned to the buffer can be up to 512 bytes, while the buffer is created to...