9733 matches found
CVE-2004-0683
Symantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service CPU consumption via a compressed archive that contains a large number of directories...
RHEL 2.1 : unzip (RHSA-2002:138)
The unzip and tar utilities contain vulnerabilities which can allow arbitrary files to be overwritten during archive extraction. The unzip and tar utilities are used for dealing with archives, which are multiple files stored inside of a single file. A directory traversal vulnerability in unzip...
security flaw
Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with 1 .. sequences or 2 absolute pathnames with double leading slashes "//absolute/path"...
security flaw
Multiple stack-based buffer overflows in the getheader function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testi...
[ GLSA 200404-07 ] ClamAV RAR Archive Remote Denial Of Service Vulnerability
Gentoo Linux Security Advisory GLSA 200404-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
clamav rar DoS
Certain types of archives cause scanner to crash...
CVE-2004-0333
CVE-2004-0333 describes a buffer overflow in the UUDeview component used by WinZip 6.2–8.1 SR-1 (and possibly other packages). The overflow can be triggered by decoding a MIME archive with long MIME parameters, allowing remote code execution. Multiple sources corroborate the same core issue acros...
DSA-424 mc - buffer overflow
Bulletin has no description...
[SECURITY] Some Debian Project machines have been compromised
------------------------------------------------------------------------ Debian Security Advisory http://www.debian.org/security/ Some Debian Project machines compromised [email protected] November 21st, 2003 [email protected] -...
[SECURITY] Some Debian Project machines have been compromised
------------------------------------------------------------------------ Debian Security Advisory http://www.debian.org/security/ Some Debian Project machines compromised [email protected] November 21st, 2003 [email protected] -...
Midnight commander buffer overflow
Uninitialized buffer data triggers buffer overflow during archive listing...
DEBIAN-CVE-2003-0427
Buffer overflow in mikmod 3.1.6 and earlier allows remote attackers to execute arbitrary code via an archive file that contains a file with a long filename...
Moderate: Red Hat Security Advisory: : : : Updated unzip and tar packages that fix vulnerabilities are now available
Updated unzip and tar packages are available for IBM iSeries and pSeries systems. These packages resolve vulnerabilities allowing arbitrary files to be overwritten during archive extraction. The unzip and tar utilities are used for manipulating archives, which are multiple files stored inside of ...
Moderate: Red Hat Security Advisory: : Updated unzip packages fix trojan vulnerability
Updated unzip packages resolving a vulnerability allowing arbitrary files to be overwritten are now available. Updated 15 August 2003 Ben Laurie found that the original patch to fix this issue missed a case where the path component included a quoted slash. These updated packages contain a new pat...
CVE-2003-0427
Buffer overflow in mikmod 3.1.6 and earlier allows remote attackers to execute arbitrary code via an archive file that contains a file with a long filename...
CVE-2003-0427
Buffer overflow in mikmod 3.1.6 and earlier allows remote attackers to execute arbitrary code via an archive file that contains a file with a long filename...
unzip directory traversal revisited
unzip directory traversal revisited problem: well I kinda stumbled over this when i was looking for something else A while back some fuss was made over the use of .. sequences in archives because it allows you to craft an archive which will trojan your system on extraction the creators of unzip...
CVE-2002-0761
CVE-2002-0761 affects bzip2 before 1.0.2 on FreeBSD (4.5 and earlier) and OpenLinux (3.1 and 3.1.1). The issue arises when creating an archive: bzip2 honors the permissions of the symbolic link rather than those of the target file, which could cause files to be extracted with less restrictive per...