1398 matches found
Gentoo Security Advisory GLSA 200804-06 (unzip)
The remote host is missing updates announced in advisory GLSA 200804-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200804-06 (unzip)
The remote host is missing updates announced in advisory GLSA 200804-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD Ports: unzip, zh-unzip, ko-unzip
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
GLSA-200804-06 : UnZip: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200804-06 UnZip: User-assisted execution of arbitrary code Tavis Ormandy of the Google Security Team discovered that the NEEDBITS macro in the inflatedynamic function in the file inflate.c can be invoked using invalid buffers, whi...
UnZip: User-assisted execution of arbitrary code
Background Info-ZIP's UnZip is a tool to list and extract files inside PKZIP compressed files. Description Tavis Ormandy of the Google Security Team discovered that the NEEDBITS macro in the inflatedynamic function in the file inflate.c can be invoked using invalid buffers, which can lead to a...
openSUSE 10 Security Update : unzip (unzip-4976)
Specially crafted files could lead unzip into using uninitialized memory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update unzip-4976. The text description of this plugin is C SUSE LLC...
SuSE 10 Security Update : unzip (ZYPP Patch Number 4977)
Specially crafted files could lead unzip into using uninitialized memory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid31676; scriptversion"1.16";...
rPSA-2008-0116-1 unzip
rPath Security Advisory: 2008-0116-1 Published: 2008-03-21 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect Deterministic Denial of Service Updated Versions: unzip=conary.rpath.com@rpl:1/5.52-4.1-1 rPath Issue Tracking System: https://issues.rpath.com/browse/RPL-2317...
Debian DSA-1522-1 : unzip - programming error
Tavis Ormandy discovered that unzip, when processing specially crafted ZIP archives, could pass invalid pointers to the C library's free routine, potentially leading to arbitrary code execution CVE-2008-0888 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : unzip vulnerability (USN-589-1)
Tavis Ormandy discovered that unzip did not correctly clean up pointers. If a user or automated service was tricked into processing a specially crafted ZIP archive, a remote attacker could execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the preceding...
USN-589-1: unzip vulnerability
Tavis Ormandy discovered that unzip did not correctly clean up pointers. If a user or automated service was tricked into processing a specially crafted ZIP archive, a remote attacker could execute arbitrary code with user privileges...
Info-ZIP UnZip inflate_dynamic()函数堆破坏漏洞
BUGTRAQ ID: 28288 CVECAN ID: CVE-2008-0888 unzip是在Unix下对.zip文件格式进行解压的工具。 unzip的实现上存在漏洞，攻击者可能利用此漏洞通过诱使用户处理恶意文档提升权限。...
Debian Security Advisory DSA 1522-1 (unzip)
The remote host is missing an update to unzip announced via advisory DSA 1522-1. OpenVAS Vulnerability Test $Id: deb15221.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1522-1 unzip Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian: Security Advisory (DSA-1522-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 3 : unzip (CESA-2008:0196)
Updated unzip packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The unzip utility is used to list, test, or extract files from a zip archive. An invalid pointer flaw was found in unzip. If a...
RHEL 2.1 / 3 : unzip (RHSA-2008:0196)
Updated unzip packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The unzip utility is used to list, test, or extract files from a zip archive. An invalid pointer flaw was found in unzip. If a...
unzip security update
CentOS Errata and Security Advisory CESA-2008:0196-01 Updated unzip packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The unzip utility is used to list, test, or extract files from a zip...
unzip security update
CentOS Errata and Security Advisory CESA-2008:0196 Updated unzip packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The unzip utility is used to list, test, or extract files from a zip archive...
Moderate: Red Hat Security Advisory: unzip security update
Updated unzip packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The unzip utility is used to list, test, or extract files from a zip archive. An invalid pointer flaw was found in unzip. If a...
unzip: free() called for uninitialized or already freed pointer
The NEEDBITS macro in the inflatedynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data...