2133 matches found
Unzip vulnerable to slip-zip attack
When extracting a ZIP file using the Unzip class, a prepared zip file could overwrite arbitrary files as the basedir wasn't enforced. All released versions starting with 1.0 are affected. The issue is addressed in release v1.8.1.6. You can modify earlier versions by implementing the changes from...
Arbitrary File Write via Archive Extraction (Zip Slip)
Overview org.apache.storm:storm-server is a distributed realtime computation system. Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip. Details It is exploited using a specially crafted zip archive, that holds path traversal filenames. When...
Arbitrary File Write via Archive Extraction (Zip Slip)
Overview org.apache.storm:storm-core is a distributed realtime computation system. Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip. Details It is exploited using a specially crafted zip archive, that holds path traversal filenames. When...
Arbitrary File Write via Archive Extraction (Zip Slip)
Overview org.zeroturnaround:zt-zip is a library that helps to create, modify or extract ZIP archives. Affected versions of the package are vulnerable to Arbitrary File Write via Archive Extraction AKA "Zip Slip". It is exploited using a specially crafted zip archive, that holds path traversal...
Arbitrary File Write via Archive Extraction (Zip Slip)
Overview net.lingala.zip4j:zip4j is a open source java library to handle zip files. Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip. Successful exploitation of this vulnerability can result in remote command execution. Details It is exploit...
Arbitrary File Write via Archive Extraction (Zip Slip)
Overview org.codehaus.plexus:plexus-archiver is a Collection of Plexus components to create archives or extract files out of an archive to a directory with a unified Archiver/UnArchiver API whatever the archive format is. Affected versions of the package are vulnerable to Arbitrary File Write via...
Arbitrary File Write via Archive Extraction (Zip Slip)
Overview sharpcompress is a compression library for .NET Standard 1.0 that can unrar, decompress 7zip, decompress xz, zip/unzip, tar/untar lzip/unlzip, bzip2/unbzip2 and gzip/ungzip with forward-only reading and file random access APIs. Affected versions of the package are vulnerable to Arbitrary...
Arbitrary File Write via Archive Extraction (Zip Slip)
Overview dotnetzip is a class library and toolset for manipulating zip files. Affected versions of the package are vulnerable to Arbitrary File Write via Archive Extraction AKA "Zip Slip". It is exploited using a specially crafted zip archive, that holds path traversal filenames. When exploited, ...
Arbitrary File Write via Archive Extraction (Zip Slip)
Overview github.com/mholt/archiver/cmd/archiver makes it trivially easy to make and extract common archive formats such as .zip, and .tar.gz. Simply name the input and output files. Affected versions of the package are vulnerable to Arbitrary File Write via Archive Extraction AKA "Zip Slip". It i...
tcpdump: buffer overflow in the sliplink_print function
A vulnerability was discovered in tcpdump's handling of LINKTYPESLIP pcap files. An attacker could craft a malicious pcap file that would cause tcpdump to crash when attempting to print a summary of packet data within the file...
tcpdump: Segmentation Violation in the compressed_sl_print
A vulnerability was discovered in tcpdump's handling of LINKTYPESLIP pcap files. An attacker could craft a malicious pcap file that would cause tcpdump to crash when attempting to print a summary of packet data within the file...
USN-3415-1: tcpdump vulnerabilities
Wilfried Kirsch discovered a buffer overflow in the SLIP decoder in tcpdump. A remote attacker could use this to cause a denial of service application crash or possibly execute arbitrary code. CVE-2017-11543 Bhargava Shastry discovered a buffer overflow in the bitfield converter utility function...
USN-3415-1 tcpdump vulnerabilities
Wilfried Kirsch discovered a buffer overflow in the SLIP decoder in tcpdump. A remote attacker could use this to cause a denial of service application crash or possibly execute arbitrary code. CVE-2017-11543 Bhargava Shastry discovered a buffer overflow in the bitfield converter utility function...
Threat Outbreak Alert RuleID29474: Email Messages Distributing Malicious Software on June 13, 2017
Medium Alert ID: 54185 First Published: 2017 June 13 13:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29474 may contain the following files: Name | Siz...
Threat Outbreak Alert RuleID28917: Email Messages Distributing Malicious Software on April 28, 2017
Medium Alert ID: 53645 First Published: 2017 April 28 14:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28917 may contain the following files: Name | Si...
tcpdump buffer overflow vulnerability (CNVD-2017-02330)
tcpdump is a set of sniffing tools developed by the Tcpdump team that runs under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A buffer overflow vulnerability exists in the slifprint function ...
Threat Outbreak Alert RuleID27625: Email Messages Distributing Malicious Software on February 6, 2017
Medium Alert ID: 52588 First Published: 2017 February 6 13:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27625 may contain the following files: Name |...
CVE-2016-7925
The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:slifprint...
