Fedora Update for unzip FEDORA-2016-3b4de2babd

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 24 Update: unzip-6.0-31.fc24

The unzip utility is used to list, test, or extract files from a zip archive. Zip archives are commonly found on MS-DOS systems. The zip utility, included in the zip package, creates zip archives. Zip and unzip are both compatible with archives created by PKWARER's PKZIP for MS-DOS, but the...

[SECURITY] Fedora 25 Update: unzip-6.0-31.fc25

The unzip utility is used to list, test, or extract files from a zip archive. Zip archives are commonly found on MS-DOS systems. The zip utility, included in the zip package, creates zip archives. Zip and unzip are both compatible with archives created by PKWARER's PKZIP for MS-DOS, but the...

Debian DLA-741-1 : unzip security update

'unzip -l' CVE-2014-9913 and 'zipinfo' CVE-2016-9844 were vulnerable to buffer overflows when provided malformed or maliciously-crafted ZIP files. For Debian 7 'Wheezy', these problems have been fixed in version 6.0-8+deb7u6. We recommend that you upgrade your unzip packages. NOTE: Tenable Networ...

[SECURITY] [DLA 741-1] unzip security update

Package : unzip Version : 6.0-8+deb7u6 CVE ID : CVE-2014-9913 CVE-2016-9844 Debian Bug : 847485 847486 "unzip -l" CVE-2014-9913 and "zipinfo" CVE-2016-9844 were vulnerable to buffer overflows when provided malformed or maliciously-crafted ZIP files. For Debian 7 "Wheezy", these problems have been...

DLA-741-1 unzip - security update

Bulletin has no description...

Info-ZIP UnZip 'zipinfo.c' Buffer Overflow Vulnerability

UnZip is Info-ZIP an extraction tool that realizes the compression format as .zip. Info-ZIP UnZip suffers from a remote buffer overflow vulnerability that stems from a failure to perform sufficient bounds checking on user input. An attacker could cause a denial of service by exploiting this...

GLSA-201611-01 : UnZip: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201611-01 UnZip: Multiple vulnerabilities Multiple vulnerabilities were found in UnZip. Please review the referenced CVEs for additional information. Impact : Remote attackers could execute arbitrary code or cause Denial of Servic...

UnZip: Multiple vulnerabilities

Background Info-ZIP’s UnZip is a tool to list and extract files inside PKZIP compressed files. Description Multiple vulnerabilities were found in UnZip. Please review the referenced CVE’s for additional information. Impact Remote attackers could execute arbitrary code or cause Denial of Service...

openSUSE Security Update : unzip (openSUSE-2016-1188)

This update for unzip fixes the following issues : - CVE-2015-7696: Specially crafted zip files with password protection could trigger a crash and lead to denial of service bsc950110 - CVE-2015-7697: Specially crafted zip files could trigger an endless loop and lead to denial of service bsc950111...

Usermode Archive Sandbox: ZipJail

Usermode Archive Sandbox ZipJail is a usermode sandbox for unpacking archives using the unzip , rar , 7z , and unace utilities. Through the use of the tracy library it limits the attack surfaces to an absolute minimum in case a malicious archive tries to exploit known or unknown vulnerabilities i...

Minitar Directory Traversal Vulnerability

Minitar allows attackers to overwrite arbitrary files during archive extraction via a .. dot dot in an extracted filename. Analogous vulnerabilities for unzip and tar: https://www.cvedetails.com/cve/CVE-2001-1268/ and http://www.cvedetails.com/cve/CVE-2001-1267/ Credit: ecneladis...

eXtplorer Directory Traversal Vulnerability

eXtplorer is a PHP-based online file management program that supports online browsing of files and folders as well as logging into FTP servers as an FTP client. A directory traversal vulnerability exists in the unzip/extract functionality of eXtplorer version 2.1.9, which stems from the program...

CVE-2016-4007

Multiple unspecified vulnerabilities in the obs-service-extractfile package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with "illegal options."...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the obs-service-extractfile package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with "illegal options."...

CVE-2016-4007

CVE-2016-4007 affects the obs-service-extract_file package (and related source validator components) via code/parameter injection in service definitions (unzip with illegal options). Public advisories note the issue was fixed by OBS-related updates: openSUSE/SUSE security notices for obs-service-...

CAM UnZip 5.1 Path Traversal / Code Execution

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CAMUNZIP-ARCHIVE-PATH-TRAVERSAL.txt Vendor: ================= www.camunzip.com Product: ============== CAM UnZip v5.1 Vulnerability Type: ====================== Archive Path Traversal CVE...

CAM UnZip 5.1 - .'ZIP' File Directory Traversal

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CAMUNZIP-ARCHIVE-PATH-TRAVERSAL.txt Vendor: ================= www.camunzip.com Product: ============== CAM UnZip v5.1 Vulnerability Type: ====================== Archive Path Traversal CVE...

CAM UnZip 5.1 - .ZIP File Directory Traversal

CAM UnZip 5.1 - .ZIP File Directory Traversal + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CAMUNZIP-ARCHIVE-PATH-TRAVERSAL.txt Vendor: ================= www.camunzip.com Product: ============== CAM UnZip v5.1 Vulnerability Type:...

CAM UnZip 5.1 - .'ZIP' File Directory Traversal

Exploit for windows platform in category local exploits + Credits: hyp3rlinx Vendor: ================= www.camunzip.com Product: ============== CAM UnZip v5.1 Vulnerability Type: ====================== Archive Path Traversal CVE Reference: ============== N/A Vulnerability Details:...