|
|
Family: Red Hat Local Security Checks --> Category: infos
RHSA-2004-634: zip Vulnerability Scan
Vulnerability Scan Summary
Check for the version of the zip packages
Detailed Explanation for this Vulnerability Test
An updated zip package that fixes a buffer overflow vulnerability is now
available.
The zip program is an archiving utility which can create ZIP-compatible
archives.
A buffer overflow bug has been discovered in zip when handling long file
names. A possible hacker could create a specially crafted path which could
cause zip to crash or execute arbitrary instructions. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CVE-2004-1010 to this issue.
Users of zip should upgrade to this updated package, which contains
backported patches and is not vulnerable to this issue.
Solution : http://rhn.redhat.com/errata/RHSA-2004-634.html
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
