Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-589-1
HistoryMar 20, 2008 - 12:00 a.m.

unzip vulnerability

2008-03-2000:00:00
ubuntu.com
39

9.8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.072 Low

EPSS

Percentile

94.0%

JSON

Releases

  • Ubuntu 7.10
  • Ubuntu 7.04
  • Ubuntu 6.10
  • Ubuntu 6.06

Packages

  • unzip -

Details

Tavis Ormandy discovered that unzip did not correctly clean up pointers.
If a user or automated service was tricked into processing a specially
crafted ZIP archive, a remote attacker could execute arbitrary code with
user privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.10noarchunzip< 5.52-10ubuntu1.1UNKNOWN
Ubuntu7.04noarchunzip< 5.52-9ubuntu3.1UNKNOWN
Ubuntu6.10noarchunzip< 5.52-8ubuntu1.1UNKNOWN
Ubuntu6.06noarchunzip< 5.52-6ubuntu4.1UNKNOWN

Related

openvas 18
nessus 10
redhat 1
prion 1
securityvulns 5
cve 1
seebug 1
osv 1
ubuntucve 1
cbl_mariner 3
debian 1
debiancve 1
centos 2
gentoo 1
vmware 2
threatpost 1
openvas
openvas
Mandriva Update for unzip MDVSA-2008:068 (unzip)
2009-04-09 00:00:00
Ubuntu: Security Advisory (USN-589-1)
2009-03-23 00:00:00
CentOS Update for unzip CESA-2008:0196-01 centos2 i386
2009-02-27 00:00:00
nessus
nessus
RHEL 2.1 / 3 : unzip (RHSA-2008:0196)
2008-03-19 00:00:00
GLSA-200804-06 : UnZip: User-assisted execution of arbitrary code
2008-04-11 00:00:00
Scientific Linux Security Update : unzip on SL3.x i386/x86_64
2012-08-01 00:00:00
redhat
redhat
(RHSA-2008:0196) Moderate: unzip security update
2008-03-18 00:00:00
prion
prion
Design/Logic Flaw
2008-03-17 21:44:00
securityvulns
securityvulns
unzip code execution
2008-03-18 00:00:00
[SECURITY] [DSA 1522-1] New unzip packages fix potential code execution
2008-03-18 00:00:00
rPSA-2008-0116-1 unzip
2008-03-23 00:00:00
cve
cve
CVE-2008-0888
2008-03-17 21:44:00
seebug
seebug
Info-ZIP UnZip inflate_dynamic()函数堆破坏漏洞
2008-03-20 00:00:00
osv
osv
unzip - potential code execution
2008-03-17 00:00:00
ubuntucve
ubuntucve
CVE-2008-0888
2008-03-17 00:00:00
cbl_mariner
cbl_mariner
CVE-2008-0888 affecting package unzip 6.0-19
2020-10-08 18:09:51
CVE-2008-0888 affecting package unzip for versions less than 6.0-19
2022-04-09 06:51:51
CVE-2008-0888 affecting package unzip for versions less than 6.0-20
2024-03-19 17:21:46
debian
debian
[SECURITY] [DSA 1522-1] New unzip packages fix potential code execution
2008-03-18 00:01:39
debiancve
debiancve
CVE-2008-0888
2008-03-17 21:44:00
centos
centos
unzip security update
2008-03-18 22:50:34
unzip security update
2008-03-18 20:50:20
gentoo
gentoo
UnZip: User-assisted execution of arbitrary code
2008-04-06 00:00:00
vmware
vmware
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
2008-06-04 00:00:00
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
2008-06-04 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

9.8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.072 Low

EPSS

Percentile

94.0%

JSON
Related for USN-589-1
openvas18nessus10redhat1prion1securityvulns5cve1seebug1osv1ubuntucve1cbl_mariner3debian1debiancve1centos2gentoo1vmware2threatpost1