Test Kennung:	1.3.6.1.4.1.25623.1.0.52834
Kategorie:	Turbolinux Local Security Tests
Titel:	Turbolinux TLSA-2005-18 (zip)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to zip announced via advisory TLSA-2005-18. Zip is a compression and file packaging utility. A buffer overflow exists in zip which, when using recursive folder compression, can allow remote attackers to execute arbitrary code via a ZIP file containing a very long pathname. This vulnerability may allow remote attackers to execute arbitrary code via malformed ZIP files. Solution: Please use the turbopkg (zabom) tool to apply the update. http://www.securityspace.com/smysecure/catid.html?in=TLSA-2005-18 Risk factor : Critical CVSS Score: 10.0
Querverweis:	BugTraq ID: 11603 Common Vulnerability Exposure (CVE) ID: CVE-2004-1010 http://www.securityfocus.com/bid/11603 Bugtraq: 20041103 [HV-MED] Zip/Linux long path buffer overflow (Google Search) http://marc.info/?l=bugtraq&m=109958840611053&w=2 Computer Incident Advisory Center Bulletin: P-072 http://www.ciac.org/ciac/bulletins/p-072.shtml Debian Security Information: DSA-624 (Google Search) http://www.debian.org/security/2005/dsa-624 https://bugzilla.fedora.us/show_bug.cgi?id=2255 http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028379.html http://security.gentoo.org/glsa/glsa-200411-16.xml http://www.mandriva.com/security/advisories?name=MDKSA-2004:141 http://www.hexview.com/docs/20041103-1.txt https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9848 http://www.redhat.com/support/errata/RHSA-2004-634.html http://secunia.com/advisories/13094/ TurboLinux Advisory: TLSA-2005-18 http://www.turbolinux.com/security/2005/TLSA-2005-18.txt https://usn.ubuntu.com/18-1/ XForce ISS Database: infozip-compressed-folder-bo(17956) https://exchange.xforce.ibmcloud.com/vulnerabilities/17956
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.