[SECURITY] Fedora 13 Update: tar-1.22-16.fc13

The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that archive. Tar can also be used to add supplemental files to an archive and to update or list files in the archive. Tar includes multivolume support, automatic archive...

CVE-2010-0624

CVE-2010-0624 describes a heap-based buffer overflow in the rmt_read__ function of lib/rtapelib.c within the rmt client of GNU tar (before 1.23) and GNU cpio (before 2.11). A remote rmt server sending more data than requested (in archives whose filenames contain a colon) can cause memory corrupti...

CVE-2010-0624

Heap-based buffer overflow in the rmtread function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service memory corruption or possibly execute arbitrary code by sending more data than was requested,...

CVE-2010-0624

Heap-based buffer overflow in the rmtread function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio before 2.11 allows remote rmt servers to cause a denial of service memory corruption or possibly execute arbitrary code by sending more data than was requested,...

CVE-2010-0624: Heap-based buffer overflow in GNU Tar and GNU Cpio

I. BACKGROUND GNU Tar and GNU Cpio are popular programs for managing archive files. Both programs are included in many linux distributions. GNU Tar is commonly used for exchanging source code archives. Both programs include a client implementation for the remote mag tape protocol rmt. This protoc...

GNU tar / cpio buffer overflow

Buffer overflow in rmt code implementation...

WinACE RAR and TAR Directory Traversal (CVE-2006-0981)

WinACE Archiver is an application that can compress to and decompress from various archive formats. The compression mainly supports ACE, LZA, MS-CAB, ZIP archive formats, however the decompression support includes a wider range of compression formats including TAR, RAR, and others. There exists a...

CentOS 5 : vim (CESA-2008:0580)

Updated vim packages that fix security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Vim Visual editor IMproved is an updated and improved version of the vi editor. Several input...

GNU Tar PAX Extended Headers Handling Buffer Overflow (CVE-2006-0300)

The GNU tar program provides the ability to create and extract TAR archives along with various other kinds of manipulations. The program was initially designed to store files on magnetic tape, but has since then become a widely used archiving utility. A buffer overflow vulnerability exists in the...

SLES9: Security update for tar

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: tar For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5016710 within the SuSE...

SLES9: Security update for tar

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: tar For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5012056 within the SuSE...

SLES9: Security update for tar

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: tar For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5016710 within the SuSE...

SLES9: Security update for tar

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: tar For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5012056 within the SuSE...

SLES9: Security update for tar

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: tar tar For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5020240 within the SuS...

SLES9: Security update for tar

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: tar tar For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5020240 within the SuS...

SuSE9 Security Update : tar (YOU Patch Number 11723)

This update fixes a directory traversal bug in tar. CVE-2007-4131 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41149; scriptversion"1.7";...

GLSA-200909-04 : Clam AntiVirus: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200909-04 Clam AntiVirus: Multiple vulnerabilities Multiple vulnerabilities have been found in ClamAV: The vendor reported a Divide-by-zero error in the PE 'Portable Executable'; Windows .exe file handling of ClamAV CVE-2008-6680...

CVE-2008-7144

WinRAR prior to 3.71 is affected by multiple unspecified vulnerabilities triggered by crafted archive formats (ACE, ARJ, BZ2, CAB, GZ, LHA, RAR, TAR, ZIP). The exact impact, vectors, and fixes are not detailed in the provided documents.

[Backports-security-announce] Security Update for clamav

Sebastian Harl uploaded new packages for clamav which fixed the following security problems: CVE-2008-6680, DSA-1771-1, Debian bug 523016 Attackers can cause a denial of service crash via a crafted EXE file that triggers a divide-by-zero error. CVE-2009-1270, DSA-1771-1, Debian bug 523016 Attacke...

多个Symantec产品RAR/TAR/ZIP文件扫描绕过漏洞

Bugraq ID: 35354 多个Symantec产品对畸形或特殊格式的压缩档文件如tar/zip/rar/缺少真确处理，可导致绕过扫描产品的检测。 攻击者构建恶意的文件，发送给目标用户，可绕过检测使应用程序展开并执行。 目前没有详细漏洞细节提供。 Symantec Symantec AntiVirus Scan Engine for Microsoft ISA 4.3.12 Symantec Symantec AntiVirus Corporate Edition 10.2 MR2 Symantec Scan Engine 5.1.6.31 Symantec Scan Engine...