617 matches found
GLSA-200603-12 : zoo: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200603-12 zoo: Buffer overflow zoo is vulnerable to a new buffer overflow due to insecure use of the strcpy function when trying to create an archive from certain directories or filenames. Impact : An attacker could exploit this...
[SECURITY] [DSA 991-1] New zoo packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 991-1 [email protected] http://www.debian.org/security/ Steve Kemp March 10th, 2006 http://www.debian.org/security/faq -...
DSA-991-1 zoo - buffer overflow
Bulletin has no description...
GLSA-200603-05 : zoo: Stack-based buffer overflow
The remote host is affected by the vulnerability described in GLSA-200603-05 zoo: Stack-based buffer overflow Jean-Sebastien Guay-Leroux discovered a boundary error in the fullpath function in misc.c when processing overly long file and directory names in ZOO archives. Impact : An attacker could...
zoo: Stack-based buffer overflow
Background zoo is a file archiving utility for maintaining collections of files, written by Rahul Dhesi. Description Jean-Sebastien Guay-Leroux discovered a boundary error in the fullpath function in misc.c when processing overly long file and directory names in ZOO archives. Impact An attacker...
zoo contains exploitable buffer overflows
Topic: zoo contains exploitable buffer overflows Announced: 2006-02-22 Product: zoo Category: Applications/Archiving Impact: Remote code execution Credits: Jean-Sbastien Guay-Leroux I. BACKGROUND zoo is a file archiving utility for maintaining collections of files. It uses Lempel-Ziv compression ...
Stack overflow
Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected...
CVE-2006-0855
Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected...
CVE-2006-0855
Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected...
CVE-2006-0855
CVE-2006-0855 affects zoo 2.10 and earlier, where a stack-based buffer overflow in the fullpath function (misc.c) can be triggered by a crafted zoo file, allowing user-assisted remote code execution. Public reports reference Barracuda Spam Firewall usage; Debian DSA-991-1 notes a fix in older woo...
CVE-2006-0855
Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected...
CVE-2006-0855
Removed by vendor...
zoo -- stack based buffer overflow
Jean-Sébastien Guay-Leroux report a vulnerability within the zoo archiver. The vulnerability which is present in the fullpath function from the misc.c file is caused by improper checking of user supplied data. The data returned to the buffer can be up to 512 bytes, while the buffer is created to...
Panda antivirus buffer overflow
ZOO archives heap overflow...
CVE-2005-3922
Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive...
CVE-2005-3922
CVE-2005-3922 describes a heap-based buffer overflow in Panda Software Antivirus library (pskcmp.dll) when scanning ZOO archives. The root cause is a boundary/size handling error while decompressing user-supplied archives, potentially enabling arbitrary code execution with the target’s privileges...