Fedora Update for gcab FEDORA-2015-0264

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 21 : gcab-0.4-7.fc21 (2015-0264)

Security fix for CVE-2015-0552 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

CVE-2015-0552

Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...

CVE-2015-0552

Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...

CVE-2015-0552

The CVE-2015-0552 issue affects the gcab project (gcab 0.4) via the function gcab_folder_extract in libgcab/gcab-folder.c, enabling a directory traversal that allows remote attackers to write to arbitrary files in a crafted CAB file (example path). The root cause is a path handling flaw in direct...

openSUSE Security Update : gcab (openSUSE-SU-2015:0043-1)

This update fixes the following security issue : - CVE-2015-0552: Avoid path traversal boo911814, bgo742331, CVE-2015-0552. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2015-13. Th...

MGASA-2015-0018 Updated gcab packages fix CVE-2015-0552

Updated gcab packages fix security vulnerability: Jakub Wilk reported a directory traversal vulnerability due to gcab not filtering leading slashes from paths in CAB files CVE-2015-0552...