4.3 - SUN-241786

Executive Summary

Summary
Title	Sun Alert 241786 A Security Vulnerability in the bzip2(1) command may lead to a Denial of Service (DoS)

Informations
Name	SUN-241786	First vendor Publication	2008-09-12
Vendor	Sun	Last vendor Modification	2008-09-12
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:N/A:P)
Cvss Base Score	4.3	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Product: Solaris 8 Operating System Solaris 9 Operating System Solaris 10 Operating System

A security vulnerability in the bzip2(1) command and libbz2(3) library shipped with Solaris may allow a local or remote unprivileged user who provides a specially crafted bzip2 archive to cause a program crash which is a type of Denial of Service (DoS).

Additional information regarding this issue is available in the following document:

CVE-2008-1372 at http://www.security-database.com/detail.php?cve=CVE-2008-1372

State: Resolved

First released: 12-Sep-2008

Sun Alert Link:http://sunsolve.sun.com/search/document.do?assetkey=1-66-241786-1

Original Source

Url : http://blogs.sun.com/security/entry/sun_alert_241786_a_security

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10067

Oval ID:	oval:org.mitre.oval:def:10067
Title:	bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats.
Description:	bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-1372	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section bzip2-devel is earlier than 0:1.0.2-12.EL3 AND bzip2 is earlier than 0:1.0.2-12.EL3 AND bzip2-libs is earlier than 0:1.0.2-12.EL3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section bzip2-devel is earlier than 0:1.0.2-14.el4_7 AND bzip2 is earlier than 0:1.0.2-14.el4_7 AND bzip2-libs is earlier than 0:1.0.2-14.el4_7 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section bzip2-devel is earlier than 0:1.0.3-4.el5_2 AND bzip2 is earlier than 0:1.0.3-4.el5_2 AND bzip2-libs is earlier than 0:1.0.3-4.el5_2

Definition Id: oval:org.mitre.oval:def:17754

Oval ID:	oval:org.mitre.oval:def:17754
Title:	USN-590-1 -- bzip2 vulnerability
Description:	It was discovered that bzip2 did not correctly handle certain malformed archives.
Family:	unix	Class:	patch
Reference(s):	USN-590-1 CVE-2008-1372	Version:	7
Platform(s):	Ubuntu 6.06 Ubuntu 6.10 Ubuntu 7.04 Ubuntu 7.10	Product(s):	bzip2
Definition Synopsis:
Release section Ubuntu 6.06 is installed AND libbz2-1.0 DPKG is earlier than 1.0.3-0ubuntu2.1 AND Release section Ubuntu 6.10 is installed AND libbz2-1.0 DPKG is earlier than 1.0.3-3ubuntu0.1 AND Release section Ubuntu 7.04 is installed AND libbz2-1.0 DPKG is earlier than 1.0.3-6ubuntu0.1 AND Release section Ubuntu 7.10 is installed AND libbz2-1.0 DPKG is earlier than 1.0.4-0ubuntu2.1

Definition Id: oval:org.mitre.oval:def:22240

Oval ID:	oval:org.mitre.oval:def:22240
Title:	ELSA-2008:0893: bzip2 security update (Moderate)
Description:	bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:0893-01 CVE-2008-1372	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	bzip2
Definition Synopsis:
Oracle Linux 5.x rpm test bzip2-devel is earlier than 0:1.0.3-4.el5_2 AND bzip2-libs is earlier than 0:1.0.3-4.el5_2 AND bzip2 is earlier than 0:1.0.3-4.el5_2

Definition Id: oval:org.mitre.oval:def:29039

Oval ID:	oval:org.mitre.oval:def:29039
Title:	RHSA-2008:0893 -- bzip2 security update (Moderate)
Description:	Updated bzip2 packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Bzip2 is a freely available, high-quality data compressor. It provides both stand-alone compression and decompression utilities, as well as a shared library for use with other programs. A buffer over-read flaw was discovered in the bzip2 decompression routine. This issue could cause an application linked against the libbz2 library to crash when decompressing malformed archives. (CVE-2008-1372) Users of bzip2 should upgrade to these updated packages, which contain a backported patch to resolve this issue.
Family:	unix	Class:	patch
Reference(s):	RHSA-2008:0893 CESA-2008:0893-CentOS 3 CESA-2008:0893-CentOS 5 CESA-2008:0893-CentOS 2 CVE-2008-1372	Version:	3
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 3 CentOS Linux 5 CentOS Linux 2	Product(s):	bzip2
Definition Synopsis:
Red Hat Enterprise Linux 5 and CentOS Linux 5 release section Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages match section bzip2-devel is earlier than 0:1.0.3-4.el5_2 AND bzip2 is earlier than 0:1.0.3-4.el5_2 AND bzip2-libs is earlier than 0:1.0.3-4.el5_2 AND Red Hat Enterprise Linux 3 release section The operating system installed on the system is Red Hat Enterprise Linux 3 Packages match section bzip2 is earlier than 0:1.0.2-12.EL3 AND bzip2-devel is earlier than 0:1.0.2-12.EL3 AND bzip2-libs is earlier than 0:1.0.2-12.EL3 AND Red Hat Enterprise Linux 4 release section The operating system installed on the system is Red Hat Enterprise Linux 4 Packages match section bzip2 is earlier than 0:1.0.2-14.el4_7 AND bzip2-devel is earlier than 0:1.0.2-14.el4_7 AND bzip2-libs is earlier than 0:1.0.2-14.el4_7

Definition Id: oval:org.mitre.oval:def:6467

Oval ID:	oval:org.mitre.oval:def:6467
Title:	Bzip2 Bug Lets Remote Users Deny Service
Description:	bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-1372	Version:	3
Platform(s):	VMWare ESX Server 3 VMWare ESX Server 3.5	Product(s):
Definition Synopsis:
IF VMWare ESX Server 3.0.3 is installed AND All patches must be installed to not be vulnerable Patch ESX303-200811401-BG is not installed AND Patch ESX303-200811404-BG is not installed OR VMWare ESX Server 3.0.2 is installed AND All patches must be installed to not be vulnerable Patch ESX-1006980 is not installed AND Patch ESX-1006982 is not installed OR VMware ESX Server 3.5.0 is installed AND All patches must be installed to not be vulnerable Patch ESX350-200811401-SG is not installed AND Patch ESX350-200811406-SG is not installed

CPE : Common Platform Enumeration

Type	Description	Count
Application	Bzip bzip2 cpe:2.3:a:bzip:bzip2:1.0.3:::::::* cpe:2.3:a:bzip:bzip2:1.0.2:::::::* cpe:2.3:a:bzip:bzip2:1.0.1:::::::* cpe:2.3:a:bzip:bzip2:1.0:::::::* cpe:2.3:a:bzip:bzip2:0.9.5d:::::::* cpe:2.3:a:bzip:bzip2:0.9.5c:::::::* cpe:2.3:a:bzip:bzip2:0.9.5b:::::::* cpe:2.3:a:bzip:bzip2:0.9.5a:::::::* cpe:2.3:a:bzip:bzip2:0.9_c:::::::* cpe:2.3:a:bzip:bzip2:0.9_b:::::::* cpe:2.3:a:bzip:bzip2:0.9_a:::::::* cpe:2.3:a:bzip:bzip2:0.9:::::::*	12

OpenVAS Exploits

Date	Description
2010-05-12	Name : Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003 File : nvt/macosx_upd_10_5_8_secupd_2009-003.nasl
2009-10-13	Name : SLES10: Security update for Linux kernel File : nvt/sles10_bzip2.nasl
2009-10-13	Name : Solaris Update for SunFreeware bzip2 126869-04 File : nvt/gb_solaris_126869_04.nasl
2009-10-13	Name : Solaris Update for SunFreeware bzip2 126868-03 File : nvt/gb_solaris_126868_03.nasl
2009-10-13	Name : Solaris Update for bzip 114586-04 File : nvt/gb_solaris_114586_04.nasl
2009-10-13	Name : Solaris Update for bzip 114587-04 File : nvt/gb_solaris_114587_04.nasl
2009-10-10	Name : SLES9: Security update for bzip2 File : nvt/sles9p5024520.nasl
2009-06-03	Name : Solaris Update for SunFreeware bzip2 126868-02 File : nvt/gb_solaris_126868_02.nasl
2009-06-03	Name : Solaris Update for bzip2 138442-01 File : nvt/gb_solaris_138442_01.nasl
2009-06-03	Name : Solaris Update for bzip2 138441-01 File : nvt/gb_solaris_138441_01.nasl
2009-06-03	Name : Solaris Update for SunFreeware bzip2 126869-03 File : nvt/gb_solaris_126869_03.nasl
2009-06-03	Name : Solaris Update for bzip 114587-03 File : nvt/gb_solaris_114587_03.nasl
2009-04-09	Name : Mandriva Update for bzip2 MDVSA-2008:075 (bzip2) File : nvt/gb_mandriva_MDVSA_2008_075.nasl
2009-04-06	Name : Gentoo Security Advisory GLSA 200903-40 (analog) File : nvt/glsa_200903_40.nasl
2009-03-23	Name : Ubuntu Update for bzip2 vulnerability USN-590-1 File : nvt/gb_ubuntu_USN_590_1.nasl
2009-03-06	Name : RedHat Update for bzip2 RHSA-2008:0893-01 File : nvt/gb_RHSA-2008_0893-01_bzip2.nasl
2009-02-27	Name : CentOS Update for bzip2 CESA-2008:0893 centos3 x86_64 File : nvt/gb_CESA-2008_0893_bzip2_centos3_x86_64.nasl
2009-02-27	Name : CentOS Update for bzip2 CESA-2008:0893 centos3 i386 File : nvt/gb_CESA-2008_0893_bzip2_centos3_i386.nasl
2009-02-27	Name : CentOS Update for bzip2 CESA-2008:0893-01 centos2 i386 File : nvt/gb_CESA-2008_0893-01_bzip2_centos2_i386.nasl
2009-02-17	Name : Fedora Update for bzip2 FEDORA-2008-3037 File : nvt/gb_fedora_2008_3037_bzip2_fc7.nasl
2009-02-16	Name : Fedora Update for bzip2 FEDORA-2008-2970 File : nvt/gb_fedora_2008_2970_bzip2_fc8.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200804-02 (bzip2) File : nvt/glsa_200804_02.nasl
2008-09-04	Name : FreeBSD Ports: bzip2 File : nvt/freebsd_bzip20.nasl
0000-00-00	Name : Slackware Advisory SSA:2008-098-02 bzip2 File : nvt/esoft_slk_ssa_2008_098_02.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
43425	bzip2 bzlib.c Crafted File Handling DoS

Nessus® Vulnerability Scanner

Date	Description
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL9592.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0893.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080916_bzip2_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_bzip2-5295.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12119.nasl - Type : ACT_GATHER_INFO
2009-08-05	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_10_5_8.nasl - Type : ACT_GATHER_INFO
2009-08-05	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_SecUpd2009-003.nasl - Type : ACT_GATHER_INFO
2009-07-27	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2008-0019.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-075.nasl - Type : ACT_GATHER_INFO
2009-03-30	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200903-40.nasl - Type : ACT_GATHER_INFO
2008-09-17	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0893.nasl - Type : ACT_GATHER_INFO
2008-09-17	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0893.nasl - Type : ACT_GATHER_INFO
2008-05-11	Name : The remote openSUSE host is missing a security update. File : suse_bzip2-5112.nasl - Type : ACT_GATHER_INFO
2008-05-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_bzip2-5114.nasl - Type : ACT_GATHER_INFO
2008-04-11	Name : The remote Fedora host is missing a security update. File : fedora_2008-2970.nasl - Type : ACT_GATHER_INFO
2008-04-11	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2008-098-02.nasl - Type : ACT_GATHER_INFO
2008-04-11	Name : The remote Fedora host is missing a security update. File : fedora_2008-3037.nasl - Type : ACT_GATHER_INFO
2008-04-04	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200804-02.nasl - Type : ACT_GATHER_INFO
2008-03-26	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-590-1.nasl - Type : ACT_GATHER_INFO
2008-03-21	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_063399fcf6d611dcbcee001c2514716c.nasl - Type : ACT_GATHER_INFO

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	5
CPE ID(s)	12
osvdb(s)	1
Openvas Exploit(s)	24
Nessus® Exploit(s)	20

	Related
4.3	CVE-2008-1372
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 1 more Alert(s)

4.3 - SUN-241786

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Nessus® Vulnerability Scanner

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU