GLSA-200404-07 : ClamAV RAR Archive Remote Denial Of Service Vulnerability

The remote host is affected by the vulnerability described in GLSA-200404-07 ClamAV RAR Archive Remote Denial Of Service Vulnerability Certain types of RAR archives, including those created by variants of the W32.Beagle.A@mm worm, may cause clamav to crash when it attempts to process them. Impact...

CVE-2004-0333

Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters...

WinZip vulnerable to buffer overflow in handling of MIME archive parameters

Overview A buffer overflow vulnerability in the WinZip program could allow a remote attacker to execute arbitrary code on a vulnerable system. Description WinZip Computing, Inc.'s WinZip is a popular utility for creating and extracting a variety of archive file formats on Microsoft Windows-based...

iDEFENSE Security Advisory 02.27.04a: WinZip MIME Parsing Buffer Overflow Vulnerability

WinZip MIME Parsing Buffer Overflow Vulnerability iDEFENSE Security Advisory 02.27.04a: http://www.idefense.com/application/poi/display?id=76&type=vulnerabiliti es February 27, 2004 I. BACKGROUND WinZip is an archiving utility for the Microsoft Windows platform featuring built-in support for CAB...

Midnight Commander buffer overflow

Buffer overflow on archives processing...

uninitialized buffer in midnight commander

Midnight Commander is using uninitialized buffer for handling symlinks in VFS tar, cpio. See vfs/direntry.c, handling of buf at vfssresolvesymlink. I wonder but it works almost properly ;- On linux-i386 I can reach stack buffer overflow using specially crafted archive. Open...

Midnight Commander buffer overflow during symlink resolution

Midnight Commander uses a fixed sized stack buffer while resolving symbolic links within file archives tar or cpio. If an attacker can cause a user to process a specially crafted file archive with Midnight Commander, the attacker may be able to obtain the privileges of the target user...

eSafe gateway and Check Point FW-1 protection bypass

Archives packed with lates RA version are not checked...

Multiple vendor implementations of file scanning utilities vulnerable to DoS via compressed file archive

Overview Several file scanning utilities, including some virus scanners, may fail and crash when scanning compressed file archives. Description Many file scanners will decompress compressed file archives in memory so their contents can be scanned. However, some of these scanners do not check if...

Mailman/Pipermail private mailing list/local user vulnerability

There is a vulnerability in Pipermail mailing list archiving software distributed with and integrated with Mailman, that affects you if you have local users on the machine. If you have a private Mailman mailing lists and b user logins on the same machine, any local user can read the archives of...

[SECURITY] [DSA-011-1] New version of mgetty released

Package: mgetty Vulnerability: insecure tempfile Debian-specific: no Immunix reports that mgetty does not create temporary files in a secure manner, which could lead to a symlink attack. This has been corrected in mgetty 1.1.21-3potato1 We recommend you upgrade your mgetty package immediately. wg...

ezmlm-cgi/ezmlm-idx-0.40 security advisory

Summary: ezmlm-cgi is part of the ezmlm-idx-0.40.tar.gz package and allows web access to mailing list archives. When ezmlm-cgi is installed SUID user other than root, it can be used to execute arbitrary commands with the effective uid of the SUID user. Scope: Default installations of ezmlm-idx-0....

ftp.pl vulnerability

Feartech ftp browser problem From the creators page http://www.feartech.com/vv/ftp.shtml -- snip -- FTP Browser allows you to display a html enhanced directory listing, which is great for managing your ftp files. FTP Browser can do all of the following: -- snip -- But wait.. it can do more than...

CVE-2000-0425

The CVE-2000-0425 describes a buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8, enabling remote attackers to execute arbitrary commands. Affected product: LISTSERV 1.8 (Web Archives component). Root cause: a buffer overflow likely due to improper input handling in the Web Arch...

CVE-2000-0425

Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands...

CISADV000503.txt

Cerberus Information Security Advisory CISADV000503 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 3rd May 2000 Name : Listserv Web Archives Buffer Overflow Affected Systems : nix/Win32 Web Servers running Issue : Attackers can remotely execute arbitrary code Author : David...

[SECURITY] New versions of trn fixes /tmp race

All former versions of trn used a hardcoded filename in /tmp as temporary storage. If the file already exists as symbolic link to users files they will be overwritten. We recommend you upgrade your man2html package as soon as possible. wget url will fetch the file for you dpkg -i file.deb will...

[SECURITY] New versions of man2html fixes postinst glitch

Former versions of man2html uses a static file in /tmp for writing. This can lead into overwriting system files if a malicious user has created a symbolic link to it before upgrading man2html. We recommend you upgrade your man2html package as soon as possible. wget url will fetch the file for you...

[SECURITY] New versions of man2html fixes postinst glitch

Former versions of man2html uses a static file in /tmp for writing. This can lead into overwriting system files if a malicious user has created a symbolic link to it before upgrading man2html. We recommend you upgrade your man2html package as soon as possible. wget url will fetch the file for you...

[SECURITY] New versions of trn fixes /tmp race

All former versions of trn used a hardcoded filename in /tmp as temporary storage. If the file already exists as symbolic link to users files they will be overwritten. We recommend you upgrade your man2html package as soon as possible. wget url will fetch the file for you dpkg -i file.deb will...