TZipBuilder / Abakt / CAM UnZip / ZipCentral buffer overflow

Buffer overflow on ZIP archives parsing...

[Full-disclosure] Secunia Research: CAM UnZip ZIP File Handling Buffer Overflow Vulnerability

====================================================================== Secunia Research 19/05/2006 - CAM UnZip ZIP File Handling Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

FreeBSD : unzip -- permission race vulnerability (9750cf22-216d-11da-bc01-000e0c2e438a)

Imran Ghory reports a vulnerability within unzip. The vulnerability is caused by a race condition between extracting an archive and changing the permissions of the extracted files. This would give an attacker enough time to remove a file and hardlink it to another file owned by the user running...

CVE-2006-2161

Buffer overflow in 1 TZipBuilder 1.79.03.01, 2 Abakt 0.9.2 and 0.9.3-beta1, 3 CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name...

Buffer overflow

Buffer overflow in 1 TZipBuilder 1.79.03.01, 2 Abakt 0.9.2 and 0.9.3-beta1, 3 CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name...

CVE-2006-2161

Buffer overflow in 1 TZipBuilder 1.79.03.01, 2 Abakt 0.9.2 and 0.9.3-beta1, 3 CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name...

KLA10096 ACE vulnerability in CAM UnZip

A buffer overflow was found in CAM UnZip. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ZIP archive. Original advisories - Related products CAM-UnZip CVE list CVE-2006-2161 high Solution Update to...

[SECURITY] [DSA 1012-1] New unzip packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1012-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1012-1] New unzip packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1012-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2006 http://www.debian.org/security/faq -...

DSA-1012-1 unzip - buffer overflow

Bulletin has no description...

Ubuntu 4.10 / 5.04 / 5.10 : unzip regression fix (USN-248-2)

USN-248-1 fixed a vulnerability in unzip. However, that update inadvertedly changed the field order in the contents listing output, which broke unzip frontends like file-roller. The updated packages fix this regression. Note that Tenable Network Security has extracted the preceding description...

Mandrake Linux Security Advisory : unzip (MDKSA-2006:050)

A buffer overflow was foiund in how unzip handles file name arguments. If a user could tricked into processing a specially crafted, excessively long file name with unzip, an attacker could execute arbitrary code with the user's privileges. The updated packages have been patched to address this...

USN-248-2: unzip regression fix

USN-248-1 fixed a vulnerability in unzip. However, that update inadvertedly changed the field order in the contents listing output, which broke unzip frontends like file-roller. The updated packages fix this regression...

USN-248-1: unzip vulnerability

A buffer overflow was discovered in the handling of file name arguments. By tricking a user or automated system into processing a specially crafted, excessively long file name with unzip, an attacker could exploit this to execute arbitrary code with the user's privileges...

Fedora Core 4 : unzip-5.51-13.fc4 (2006-098)

Mon Feb 6 2006 Ivana Varekova 5.51-13.fc4 - fix bug 178961 - CVE-2005-4667 - unzip long file name buffer overflow - Wed Aug 3 2005 Ivana Varekova 5.51-12.fc4 - fix bug 164928 - TOCTOU issue in unzip - Mon May 9 2005 Ivana Varekova 5.51-11 - fix bug 156959 invalid file mode on created files Note...

CVE-2005-4667

CVE-2005-4667 is a vulnerability in the unzip utility where a buffer overflow can occur in command line argument handling (long filename) that could allow arbitrary code execution. The issue is reported in Unzip 5.50 and earlier and is exploitable when unzip processes crafted long file name argum...

CVE-2005-4667

Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename command line argument. NOTE: since the overflow occurs in a non-setuid program, there are not many scenarios under which it poses a vulnerability, unless unzip is passed long...

CVE-2005-4667

Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename command line argument. NOTE: since the overflow occurs in a non-setuid program, there are not many scenarios under which it poses a vulnerability, unless unzip is passed long...

Ubuntu 4.10 / 5.04 : unzip vulnerability (USN-191-1)

Imran Ghory found a race condition in the handling of output files. While a file was unpacked by unzip, a local attacker with write permissions to the target directory could exploit this to change the permissions of arbitrary files of the unzip user. Note that Tenable Network Security has extract...

Ubuntu 4.10 / 5.04 : unzip vulnerability (USN-159-1)

If a ZIP archive contains binaries with the setuid and/or setgid bit set, unzip preserved those bits when extracting the archive. This could be exploited by tricking the administrator into unzipping an archive with a setuid-root binary into a directory the attacker can access. This allowed the...