Test Kennung:	1.3.6.1.4.1.25623.1.0.54737
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200411-16 (zip)
Zusammenfassung:	The remote host is missing updates announced in;advisory GLSA 200411-16.
Beschreibung:	Summary: The remote host is missing updates announced in advisory GLSA 200411-16. Vulnerability Insight: zip contains a buffer overflow when creating a ZIP archive of files with very long path names. This could lead to the execution of arbitrary code. Solution: All zip users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=app-arch/zip-2.3-r4' CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1010 BugTraq ID: 11603 http://www.securityfocus.com/bid/11603 Bugtraq: 20041103 [HV-MED] Zip/Linux long path buffer overflow (Google Search) http://marc.info/?l=bugtraq&m=109958840611053&w=2 Computer Incident Advisory Center Bulletin: P-072 http://www.ciac.org/ciac/bulletins/p-072.shtml Debian Security Information: DSA-624 (Google Search) http://www.debian.org/security/2005/dsa-624 https://bugzilla.fedora.us/show_bug.cgi?id=2255 http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028379.html http://security.gentoo.org/glsa/glsa-200411-16.xml http://www.mandriva.com/security/advisories?name=MDKSA-2004:141 http://www.hexview.com/docs/20041103-1.txt https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9848 http://www.redhat.com/support/errata/RHSA-2004-634.html http://secunia.com/advisories/13094/ TurboLinux Advisory: TLSA-2005-18 http://www.turbolinux.com/security/2005/TLSA-2005-18.txt https://usn.ubuntu.com/18-1/ XForce ISS Database: infozip-compressed-folder-bo(17956) https://exchange.xforce.ibmcloud.com/vulnerabilities/17956
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.