• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

ARJ Software UNARJ Remote Buffer Overflow Vulnerability

Solution:

Please see the referenced advisories for more information.


ARJ Software Inc. UNARJ 2.43

• Debian unarj_2.43-3woody1_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/non-free/u/unarj/unarj_2.43-3w oody1_alpha.deb


• Debian unarj_2.43-3woody1_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/non-free/u/unarj/unarj_2.43-3w oody1_arm.deb


• Debian unarj_2.43-3woody1_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/non-free/u/unarj/unarj_2.43-3w oody1_hppa.deb


• Debian unarj_2.43-3woody1_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/non-free/u/unarj/unarj_2.43-3w oody1_i386.deb


• Debian unarj_2.43-3woody1_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/non-free/u/unarj/unarj_2.43-3w oody1_ia64.deb


• Debian unarj_2.43-3woody1_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/non-free/u/unarj/unarj_2.43-3w oody1_m68k.deb


• Debian unarj_2.43-3woody1_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/non-free/u/unarj/unarj_2.43-3w oody1_powerpc.deb


• Debian unarj_2.43-3woody1_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/non-free/u/unarj/unarj_2.43-3w oody1_s390.deb


• Debian unarj_2.43-3woody1_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/non-free/u/unarj/unarj_2.43-3w oody1_sparc.deb


• RedHat unarj-2.63a-4.0.7.3.1.legacy.i386.rpm
  http://download.fedoralegacy.org/redhat/7.3/updates/i386/unarj-2.63a-4 .0.7.3.1.legacy.i386.rpm

ARJ Software Inc. UNARJ 2.63 a

• Fedora unarj-2.63a-7.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora unarj-2.63a-7.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora unarj-debuginfo-2.63a-7.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora unarj-debuginfo-2.63a-7.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• RedHat unarj-2.63a-4.0.9.1.legacy.i386.rpm
  http://download.fedoralegacy.org/redhat/9/updates/i386/unarj-2.63a-4.0 .9.1.legacy.i386.rpm


• RedHat unarj-2.63a-4.1.1.legacy.i386.rpm
  http://download.fedoralegacy.org/fedora/1/updates/i386/unarj-2.63a-4.1 .1.legacy.i386.rpm

S.u.S.E. Linux Personal 9.0

• SuSE unarj-2.65-137.i586.rpm
  x86
  ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/unarj-2.65-137.i5 86.rpm


• SuSE unarj-2.65-137.x86_64.rpm
  x86
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/unarj-2.65-13 7.x86_64.rpm

S.u.S.E. Linux Personal 9.1

• SuSE unarj-2.65-131.6.i586.rpm
  x86
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/unarj-2.65-131.6. i586.rpm


• SuSE unarj-2.65-131.6.x86_64.rpm
  x86-64
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/unarj-2.65-13 1.6.x86_64.rpm

S.u.S.E. Linux Personal 9.2

• SuSE unarj-2.65-133.3.i586.rpm
  ix86 fix
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/unarj-2.65-133.3. i586.rpm


• SuSE unarj-2.65-133.3.x86_64.rpm
  x86-64 fix
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/x86_64/unarj-2.65-13 3.3.x86_64.rpm