Executive Summary
| Summary | |
|---|---|
| Title | New unalz packages fix arbitrary code execution |
| Informations | |||
|---|---|---|---|
| Name | DSA-959 | First vendor Publication | 2006-01-30 |
| Vendor | Debian | Last vendor Modification | 2006-01-30 |
| Severity (Vendor) | N/A | Revision | 1 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Ulf Härnhammer from the Debian Audit Project discovered that unalz, a decompressor for ALZ archives, performs insufficient bounds checking when parsing file names. This can lead to arbitrary code execution if an attacker provides a crafted ALZ archive. The old stable distribution (woody) does not contain unalz. For the stable distribution (sarge) this problem has been fixed in version 0.30.1 For the unstable distribution (sid) this problem will be fixed soon. We recommend that you upgrade your unalz package. |
Original Source
| Url : http://www.debian.org/security/2006/dsa-959 |
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2008-01-17 | Name : Debian Security Advisory DSA 959-1 (unalz) File : nvt/deb_959_1.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 21160 | unalz Archive Extraction Filename Overflow A remote overflow exists in unalz. The application fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted 'ALZ' archive containing a file with an overly long filename, a remote attacker can cause arbitrary code execution resulting in a loss of integrity. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2006-10-14 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-959.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:34:52 |
|
