Executive Summary

Informations
NameCVE-2002-0059First vendor Publication2002-03-15
VendorCveLast vendor Modification2018-05-02

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score7.5Attack RangeNetwork
Cvss Impact Score6.4Attack ComplexityLow
Cvss Expoit Score10AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Security Protection

ImpactsProvides unauthorized access : Allows partial confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service.

Detail

The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0059

CWE : Common Weakness Enumeration

%idName

CPE : Common Platform Enumeration

TypeDescriptionCount
Application14

OpenVAS Exploits

DateDescription
2008-01-17Name : Debian Security Advisory DSA 122-1 (zlib, various)
File : nvt/deb_122_1.nasl

Open Source Vulnerability Database (OSVDB)

idDescription
2052zlib Compression Library Heap Corruption

Nessus® Vulnerability Scanner

DateDescription
2004-09-29Name : The remote Debian host is missing a security-related update.
File : debian_DSA-122.nasl - Type : ACT_GATHER_INFO
2004-07-31Name : The remote Mandrake Linux host is missing one or more security updates.
File : mandrake_MDKSA-2002-022.nasl - Type : ACT_GATHER_INFO
2004-07-31Name : The remote Mandrake Linux host is missing one or more security updates.
File : mandrake_MDKSA-2002-023.nasl - Type : ACT_GATHER_INFO
2004-07-31Name : The remote Mandrake Linux host is missing a security update.
File : mandrake_MDKSA-2002-024.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

SourceUrl
BID http://www.securityfocus.com/bid/4267
CALDERA ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-015.1.txt
http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txt
CERT http://www.cert.org/advisories/CA-2002-07.html
CERT-VN http://www.kb.cert.org/vuls/id/368819
CONECTIVA http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000469
DEBIAN http://www.debian.org/security/2002/dsa-122
HP http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-030
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-036
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-037
MANDRAKE http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:022
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-023.php
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3
REDHAT http://www.redhat.com/support/errata/RHSA-2002-026.html
http://www.redhat.com/support/errata/RHSA-2002-027.html
XF https://exchange.xforce.ibmcloud.com/vulnerabilities/8427

Alert History

If you want to see full details history, please login or register.
0
1
2
DateInformations
2018-05-03 09:19:24
  • Multiple Updates
2014-02-17 10:24:25
  • Multiple Updates
2013-05-11 12:07:58
  • Multiple Updates