CVE-2006-6171

ProFTPD 1.3.0a and earlier does not properly set the buffer size limit when CommandBufferSize is specified in the configuration file, which leads to an off-by-two buffer underflow. NOTE: in November 2006, the role of CommandBufferSize was originally associated with CVE-2006-5815, but this was an...

GLSA-200611-24 : LHa: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200611-24 LHa: Multiple vulnerabilities Tavis Ormandy of the Google Security Team discovered several vulnerabilities in the LZH decompression component used by LHa. The maketable function of unlzh.c contains an array index error a...

Low ncompress security update

4.2.4-43.rhel4 - display statistics when compressing 0 length files 189215 - fix return code when compressing 0 length files 189216 4.2.4-42.rhel4 - fix bss buffer underflow CVE-2006-1168 201335...

CVE-2006-6171: Undefined Security Weakness

ProFTPD 1.3.0a and earlier does not properly set the buffer size limit when CommandBufferSize is specified in the configuration file, which leads to an off-by-two buffer underflow. NOTE: in November 2006, the role of CommandBufferSize was originally associated with CVE-2006-5815, but this was an...

Moderate gzip security update

1.3.3-16.rhel4 - fix bug 204676 patches by Tavis Ormandy - cve-2006-4334 - null dereference problem - cve-2006-4335 - buffer overflow problem - cve-2006-4336 - buffer underflow problem - cve-2006-4338 - infinite loop problem - cve-2006-4337 - buffer overflow problem...

PT-2006-1005 · Proftpd +1 · Proftpd +1

Name of the Vulnerable Software and Affected Versions: ProFTPD versions 1.3.0a and earlier Description: The issue is related to the improper setting of the buffer size limit when CommandBufferSize is specified in the configuration file, potentially leading to an off-by-two buffer underflow...

Debian DSA-1181-1 : gzip - several vulnerabilities

Tavis Ormandy from the Google Security Team discovered several vulnerabilities in gzip, the GNU compression utility. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-4334 A NULL pointer dereference may lead to denial of service if gzip is used in an...

Debian DSA-1149-1 : ncompress - buffer underflow

Tavis Ormandy from the Google Security Team discovered a missing boundary check in ncompress, the original Lempel-Ziv compress and uncompress programs, which allows a specially crafted datastream to underflow a buffer with attacker controlled data. %NASLMINLEVEL 70300 C Tenable Network Security,...

GLSA-200610-03 : ncompress: Buffer Underflow

The remote host is affected by the vulnerability described in GLSA-200610-03 ncompress: Buffer Underflow Tavis Ormandy of the Google Security Team discovered a static buffer underflow in ncompress. Impact : An attacker could create a specially crafted LZW archive, that when decompressed by a user...

ncompress: Buffer Underflow

Background ncompress is a suite of utilities to create and extract Lempel-Ziff-Welch LZW compressed archives. Description Tavis Ormandy of the Google Security Team discovered a static buffer underflow in ncompress. Impact An attacker could create a specially crafted LZW archive, that when...

GLSA-200609-13 : gzip: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200609-13 gzip: Multiple vulnerabilities Tavis Ormandy of the Google Security Team has reported multiple vulnerabilities in gzip. A stack buffer modification vulnerability was discovered in the LZH decompression code, where a...

CVE-2006-4336

Buffer underflow in the buildtree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index...

DEBIAN-CVE-2006-4336

Buffer underflow in the buildtree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index...

CVE-2006-4336

Buffer underflow in the buildtree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index...

CVE-2006-4336

Buffer underflow in the buildtree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index...

CVE-2006-4336

Buffer underflow in the buildtree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index...

CVE-2006-4336

CVE-2006-4336 affects gzip 1.3.5: a buffer underflow in gzip’s build_tree function (unpack.c) can be triggered by a crafted leaf count table, causing a write to a negative index and enabling potential code execution. Connected advisories indicate multiple vendor patches were released (e.g., Red H...

CVE-2006-4336

Buffer underflow in the buildtree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index...

[SECURITY] [DSA 1181-1] New gzip packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1181-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 19th, 2006 http://www.debian.org/security/faq -...

multiple vulnerabilities in lha

Buffer underflow in the buildtree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index...