6168 matches found
Slackware Advisory SSA:2006-335-01 tar
The remote host is missing an update as announced via advisory SSA:2006-335-01. OpenVAS Vulnerability Test $Id: esoftslkssa200633501.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
Slackware: Security Advisory (SSA:2006-335-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-5206
Multiple untrusted search path vulnerabilities in e-press ONE Office E-NoteTaker and E-Zip allow local users to gain privileges via a Trojan horse 1 mfc71enu.dll or 2 mfc71loc.dll file in the current working directory, as demonstrated by a directory that contains a .txt, .rar, or .tar file. NOTE:...
Ubuntu 11.04 / 11.10 / 12.04 LTS : clamav regression (USN-1482-3)
USN-1482-1 fixed vulnerabilities in ClamAV. The updated package could fail to properly scan files in some situations. This update fixes the problem. We apologize for the inconvenience. It was discovered that ClamAV incorrectly handled certain malformed TAR archives. A remote attacker could create...
Ubuntu: Security Advisory (USN-1482-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-1482-3: ClamAV regression
USN-1482-1 fixed vulnerabilities in ClamAV. The updated package could fail to properly scan files in some situations. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that ClamAV incorrectly handled certain malformed TAR archives. A...
FreeBSD Ports: clamav
The remote host is missing an update to the system as announced in the referenced advisory. VID eb12ebee-b7af-11e1-b5e0-000c299b62e1 OpenVAS Vulnerability Test $ Description: Auto generated from VID eb12ebee-b7af-11e1-b5e0-000c299b62e1 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Mandriva Update for php MDVSA-2012:093 (php)
Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2012:093 php Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Mandriva Update for php MDVSA-2012:093 (php)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Scientific Linux Security Update : tar on SL5.x, SL4.x i386/x86_64
A path traversal flaw was discovered in the way GNU tar extracted archives. A malicious user could create a tar archive that could write to arbitrary files to which the user running GNU tar had write access. CVE-2007-4131 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text i...
Scientific Linux Security Update : tar on SL3.x, SL4.x, SL5.x i386/x86_64
CVE-2007-4476 tar/cpio stack crashing in safernamesuffix CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially crafted archive A heap-based buffer overflow flaw was found in the way tar expanded archive files. If a user were tricked into expanding a specially crafted archiv...
Scientific Linux Security Update : cpio on SL3.x, SL4.x, SL5.x i386/x86_64
CVE-2005-4268 cpio large filesize buffer overflow CVE-2007-4476 tar/cpio stack crashing in safernamesuffix CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially crafted archive A heap-based buffer overflow flaw was found in the way cpio expanded archive files. If a user wer...
Scientific Linux Security Update : perl-Archive-Tar on SL4.x, SL5.x i386/x86_64
Multiple directory traversal flaws were discovered in the Archive::Tar module. A specially crafted tar file could cause a Perl script, using the Archive::Tar module to extract the archive, to overwrite an arbitrary file writable by the user running the script. CVE-2007-4829 This package upgrades...
Scientific Linux Security Update : libarchive on SL6.x i386/x86_64
The libarchive programming library can create and read several different streaming archive formats, including GNU tar and cpio. It can also read ISO 9660 CD-ROM images. Two heap-based buffer overflow flaws were discovered in libarchive. If a user were tricked into expanding a specially crafted IS...
SuSE 10 Security Update : clamav (ZYPP Patch Number 8200)
The following issue has been fixed : - Viruses contained in specially crafted tar or CHM files could have evaded detection by clamav. CVE-2012-1457 / CVE-2012-1458 / CVE-2012-1459 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
CVE-2012-2386
Integer overflow in the pharparsetarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted tar file that triggers a heap-based buffer overflow...
php: Integer overflow leading to heap-buffer overflow in the Phar extension
Integer overflow in the pharparsetarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted tar file that triggers a heap-based buffer overflow...
Moderate: Red Hat Security Advisory: php53 security update
Updated php53 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
ClamAV < 0.97.5 Multiple Vulnerabilities
According to its version, the ClamAV clamd antivirus daemon on the remote host is earlier than 0.97.5 and is, therefore, potentially affected by the following vulnerabilities : - Errors exist related to the 'TAR' file parser that can allow malware detection to be bypassed when handling such files...
