Low unzip security and bug fix update

5.51-9.EL4.5 - Resolves: 230558 problem in patch4 unzipped file permissions 5.51-8.EL4.5 - fix problem with 4GB files which are not compressed 5.51-7.EL4.5 - fix 164927 - TOCTOU issue in unzip - fix 178960 - unzip long filename buffer overflow - fix 199104 - add large file support return Lon's 4G...

Moderate: cups security update

1.1.22-0.rc1.9.18 - REVERTED these changes: - Applied patch from STR 1301 bug 195354. - Patch pdftops to understand 'includeifexists', and use that in the pdftops.conf file bug 188583. - Clear the printer's statemessage and statereasons after successful job completion bug 187457. - Include...

Multiple Symantec Web Security vulnerabilities

CPU exhaustion on large file submission. Crossite scripting...

Design/Logic Flaw

The license registering interface in Symantec Web Security SWS before 3.0.1.85 allows attackers to cause a denial of service CPU consumption by submitting a large file...

squid security update

CentOS Errata and Security Advisory CESA-2006:0052 An updated squid package that fixes a security vulnerability as well as several issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy cachin...

DEBIAN-CVE-2005-4268

Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service crash and possibly execute arbitrary code via a file whose size is represented by more than 8 digits...

CVE-2005-3903

Buffer overflow in uidadmin in SCO Unixware 7.1.3 and 7.1.4 allows local users to execute arbitrary code via a -S scheme argument that specifies a large file, a different vulnerability than CVE-2001-1063...

PHP readfile() DoS

Denial of service during large file access...

Low: Red Hat Security Advisory: cpio security update

An updated cpio package that fixes a umask bug and supports large files 2GB is now available. This update has been rated as having low security impact by the Red Hat Security Response Team GNU cpio copies files into or out of a cpio or tar archive. It was discovered that cpio uses a 0 umask when...

Mozilla XBM graphic files DoS

Large file size causes memory exhaustion...

Moderate: Red Hat Security Advisory: ncompress security update

An updated ncompress package that fixes a buffer overflow and problem in the handling of files larger than 2 GB is now available. The ncompress package contains the compress and uncompress file compression and decompression utilities, which are compatible with the original UNIX compress utility ....

gtkftpd[v1.0.4(and below)]: remote root buffer overflow exploit.

basic audit of gtkftpd; buffer overflow exists in the "LIST" command, in conjunction with a large file or directory namedoesn't account for the prefix to the buffer to exceed 256 bytes. this is explained in more detial in the exploit comment header. all purpose brute force exploit original exploi...