Low: Red Hat Bug Fix Advisory: unzip bug fix update

Updated unzip packages that address various bugs are now available. The unzip utility is used to list, test, or extract files from a zip archive. This update addresses the following issues: a TOCTOU bug that could be exploited to change file permissions CVE-2005-2475 a long filename buffer overfl...

[SECURITY] Fedora 7 Update: file-4.21-1.fc7

The file command is used to identify a particular file according to the type of data contained by the file. File can identify many different file types, including ELF binaries, system libraries, RPM packages, and different graphics formats. You should install the file package, since the file...

[SECURITY] Fedora Core 5 Update: file-4.21-1.fc5

The file command is used to identify a particular file according to the type of data contained by the file. File can identify many different file types, including ELF binaries, system libraries, RPM packages, and different graphics formats. You should install the file package, since the file...

CVE-2007-3124

Buffer overflow in backup/src/vmsbackup.c aka the backup utility in FreeVMS before 0.3.6 might allow local users to gain privileges via a long string in response to an "extract ny" prompt...

Buffer overflow

Buffer overflow in backup/src/vmsbackup.c aka the backup utility in FreeVMS before 0.3.6 might allow local users to gain privileges via a long string in response to an "extract ny" prompt...

CVE-2007-3124

CVE-2007-3124: Affected software is FreeVMS (backup utility), vulnerable through the backup/src/vmsbackup.c buffer overflow prior to 0.3.6. A local user could exploit a long string in response to an "extract [ny]" prompt to gain privileges. Documented impact is local privilege escalation with par...

CVE-2007-3124

Buffer overflow in backup/src/vmsbackup.c aka the backup utility in FreeVMS before 0.3.6 might allow local users to gain privileges via a long string in response to an "extract ny" prompt...

CVE-2007-3124: Undefined Security Weakness

Buffer overflow in backup/src/vmsbackup.c aka the backup utility in FreeVMS before 0.3.6 might allow local users to gain privileges via a long string in response to an "extract ny" prompt...

file security update

CentOS Errata and Security Advisory CESA-2007:0391 An updated file package that fixes a security flaw is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The file command is used to identify a...

Moderate: Red Hat Security Advisory: file security update

An updated file package that fixes a security flaw is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The file command is used to identify a particular file according to the type of data...

SOL4369 - Configuration utility login vulnerability - CR45786

BIG-IP 9.0.2 through 9.0.4 cache login credentials for the Configuration utility. Once a user is logged in, the cache does not check the password entered for additional sessions under that user name. As a result, it is possible to gain access to the BIG-IP Configuration utility without a password...

Design/Logic Flaw

Unspecified vulnerability in the ADSCHEMA utility in Novell SecureLogin NSL 6 SP1 before 6.0.106 has unknown impact and remote attack vectors, related to granting "users excess permissions to their own attributes."...

CVE-2007-2475

Affected product: Novell SecureLogin (NSL) 6 SP1 prior to 6.0.106, specifically the ADSCHEMA utility. Issue: A vulnerability that permits a user to gain excessive permissions to their own attributes in an Active Directory (AD) environment. Impact/notes: The vulnerability is described in the conne...

CVE-2007-2118: Undefined Security Weakness

Unspecified vulnerability in the Upgrade/Downgrade component of Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors, aka DB13. NOTE: as of 20070424, Oracle has not disputed reliable claims that this is a buffer overflow involving the "mig utility."...

'file' utility regular expressions DoS

Large number of LF characters leads to CPU consumption...

[SECURITY] Fedora Core 6 Update: file-4.19-2.fc6

The file command is used to identify a particular file according to the type of data contained by the file. File can identify many different file types, including ELF binaries, system libraries, RPM packages, and different graphics formats. You should install the file package, since the file...

Cisco Unified CallManager and Unified Presence Server ICMP Echo Request Handling Denial of Service Vulnerability

Cisco Unified CallManager and Unified Presence Server contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability exists due to improper handling of excessive amounts of ICMP echo requests. An attacker could exploit...

USN-439-1: file vulnerability

Jean-Sebastien Guay-Leroux discovered that "file" did not correctly check the size of allocated heap memory. If a user were tricked into examining a specially crafted file with the "file" utility, a remote attacker could execute arbitrary code with user privileges...

CVE-2007-1338: Undefined Security Weakness

The default configuration of the AirPort utility in Apple AirPort Extreme creates an IPv6 tunnel but does not enable the "Block incoming IPv6 connections" setting, which might allow remote attackers to bypass intended access restrictions by establishing IPv6 sessions that would have been rejected...

CVE-2007-1093

Multiple unspecified vulnerabilities in JP1/Cm2/Network Node Manager NNM before 07-10-05, and before 08-00-02 in the 08-x series, allow remote attackers to execute arbitrary code, cause a denial of service, or trigger invalid Web utility behavior...