• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

GNU GZip Filename Directory Traversal Vulnerability

Solution:
Please see the referenced advisories for more information.


Sun Solaris 8

• Sun 112668-03
  http://sunsolve.sun.com/patches

Sun Solaris 10

• Sun 120719-01
  http://sunsolve.sun.com/patches

GNU gzip 1.3.2

• Debian gzip_1.3.2-3woody5_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _alpha.deb


• Debian gzip_1.3.2-3woody5_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _arm.deb


• Debian gzip_1.3.2-3woody5_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _hppa.deb


• Debian gzip_1.3.2-3woody5_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _i386.deb


• Debian gzip_1.3.2-3woody5_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _ia64.deb


• Debian gzip_1.3.2-3woody5_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _m68k.deb


• Debian gzip_1.3.2-3woody5_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _mips.deb


• Debian gzip_1.3.2-3woody5_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _mipsel.deb


• Debian gzip_1.3.2-3woody5_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _powerpc.deb


• Debian gzip_1.3.2-3woody5_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _s390.deb


• Debian gzip_1.3.2-3woody5_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/g/gzip/gzip_1.3.2-3woody5 _sparc.deb

GNU gzip 1.3.5

• Conectiva gzip-1.3.5-49375U10_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/gzip-1.3.5-49375U10_1cl.i3 86.rpm


• Conectiva gzip-i18n-pt_BR-1.3.5-49375U10_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/gzip-i18n-pt_BR-1.3.5-4937 5U10_1cl.i386.rpm


• Ubuntu gzip_1.3.5-9ubuntu3.1_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gzip/gzip_1.3.5-9ubuntu3 .1_amd64.deb


• Ubuntu gzip_1.3.5-9ubuntu3.1_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gzip/gzip_1.3.5-9ubuntu3 .1_i386.deb


• Ubuntu gzip_1.3.5-9ubuntu3.1_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gzip/gzip_1.3.5-9ubuntu3 .1_powerpc.deb


• Ubuntu gzip_1.3.5-9ubuntu3.2_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gzip/gzip_1.3.5-9ubuntu3 .2_amd64.deb


• Ubuntu gzip_1.3.5-9ubuntu3.2_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gzip/gzip_1.3.5-9ubuntu3 .2_i386.deb


• Ubuntu gzip_1.3.5-9ubuntu3.2_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gzip/gzip_1.3.5-9ubuntu3 .2_powerpc.deb

IPCop IPCop 1.4.1

• IPCop IPCop 1.4.6
  http://ipcop.org/modules.php?op=modload&name=Downloads&file=index&req= viewdownload&cid=3&orderby=dateD

Apple Mac OS X Server 10.3.9

• Apple SecUpdSrvr2006-004Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=11231&cat= 1&platform=osx&method=sa/SecUpdSrvr2006-004Pan.dmg

FreeBSD FreeBSD 4.11 -RELEASE-p3

• FreeBSD gzip.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-05:11/gzip.patch

FreeBSD FreeBSD 5.3

• FreeBSD gzip.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-05:11/gzip.patch

SCO Open Server 6.0

• SCO VOL.000.000 for SCOSA-2005.59
  ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.59