• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Gzip Zgrep Arbitrary Command Execution Vulnerability

Solution:
Please see the referenced vendor advisories for details on obtaining and applying fixes.


Turbolinux Home

• Turbolinux gzip-1.3.3-7.i586.rpm
  Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/gzip-1.3.3-7.i586.rpm

Turbolinux Appliance Server 1.0 Hosting Edition

• Turbolinux gzip-1.3.3-7.i586.rpm
  Turbolinux Appliance Server 1.0 Hosting Edition
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/

Turbolinux Appliance Server 1.0 Workgroup Edition

• Turbolinux gzip-1.3.3-7.i586.rpm
  Turbolinux Appliance Server 1.0 Workgroup Edition
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/

Turbolinux Turbolinux Server 10.0

• Turbolinux gzip-1.3.3-7.i586.rpm
  Turbolinux 10 Server
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/up dates/RPMS/gzip-1.3.3-7.i586.rpm

Turbolinux Turbolinux Desktop 10.0

• Turbolinux gzip-1.3.3-7.i586.rpm
  Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/gzip-1.3.3-7.i586.rpm

MandrakeSoft Linux Mandrake 10.1

• Mandriva gzip-1.2.4a-13.2.101mdk.i586.rpm
  Mandrakelinux 10.1:
  http://www.mandriva.com/en/download


• Mandriva gzip-1.2.4a-13.2.101mdk.src.rpm
  Mandrakelinux 10.1:
  http://www.mandriva.com/en/download

MandrakeSoft Linux Mandrake 10.1 x86_64

• Mandriva gzip-1.2.4a-13.2.101mdk.src.rpm
  Mandrakelinux 10.1/X86_64:
  http://www.mandriva.com/en/download


• Mandriva gzip-1.2.4a-13.2.101mdk.x86_64.rpm
  Mandrakelinux 10.1/X86_64:
  http://www.mandriva.com/en/download

MandrakeSoft Linux Mandrake 10.2

• Mandriva gzip-1.2.4a-14.1.102mdk.i586.rpm
  Mandrakelinux 10.2:
  http://www.mandriva.com/en/download


• Mandriva gzip-1.2.4a-14.1.102mdk.src.rpm
  Mandrakelinux 10.2:
  http://www.mandriva.com/en/download

MandrakeSoft Linux Mandrake 10.2 x86_64

• Mandriva gzip-1.2.4a-14.1.102mdk.src.rpm
  Mandrakelinux 10.2/X86_64:
  http://www.mandriva.com/en/download


• Mandriva gzip-1.2.4a-14.1.102mdk.x86_64.rpm
  Mandrakelinux 10.2/X86_64:
  http://www.mandriva.com/en/download

Apple Mac OS X Server 10.3.9

• Apple SecUpdSrvr2007-007Pan.dmg For Mac OS X Server v10.3.9
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.10

• Apple SecUpd2007-007Ti.dmg For Mac OS X v10.4.10 (PowerPC)
  http://www.apple.com/support/downloads/


• Apple SecUpd2007-007Univ.dmg For Mac OS X v10.4.10 (Universal)
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.10

• Apple SecUpdSrvr2007-007Ti.dmg For Mac OS X Server v10.4.10 (PowerPC)
  http://www.apple.com/support/downloads/


• Apple SecUpdSrvr2007-007Universal.dmg For Mac OS X Server v10.4.10 (Universal)
  http://www.apple.com/support/downloads/

MandrakeSoft Corporate Server 2.1 x86_64

• Mandriva gzip-1.2.4a-11.4.C21mdk.src.rpm
  Corporate Server 2.1/X86_64:
  http://www.mandriva.com/en/download


• Mandriva gzip-1.2.4a-11.4.C21mdk.x86_64.rpm
  Corporate Server 2.1/X86_64:
  http://www.mandriva.com/en/download

MandrakeSoft Corporate Server 2.1

• Mandriva gzip-1.2.4a-11.4.C21mdk.i586.rpm
  Corporate Server 2.1:
  http://www.mandriva.com/en/download


• Mandriva gzip-1.2.4a-11.4.C21mdk.src.rpm
  Corporate Server 2.1:
  http://www.mandriva.com/en/download

MandrakeSoft Corporate Server 3.0

• Mandriva gzip-1.2.4a-13.2.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva gzip-1.2.4a-13.2.C30mdk.src.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download

SGI ProPack 3.0 SP5

• SGI Patch 10179
  SGI Advanced Linux Environment
  ftp://oss.sgi.com/projects/sgi_propack/download/3/updates/RPMS

MandrakeSoft Corporate Server 3.0 x86_64

• Mandriva gzip-1.2.4a-13.2.C30mdk.src.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva gzip-1.2.4a-13.2.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download

SCO Open Server 5.0.7

• SCO osr507mp4_vol.tar
  ftp://ftp.sco.com/pub/openserver5/507/mp/osr507mp4/osr507mp4_vol.tar

SCO Open Server 6.0

• SCO VOL.000.000 for SCOSA-2005.59
  ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.59

Turbolinux Turbolinux Server 7.0

• Turbolinux gzip-1.3.3-7.i586.rpm
  Turbolinux 7 Server
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/upd ates/RPMS/gzip-1.3.3-7.i586.rpm

SCO Unixware 7.1.4

• SCO gzip.image
  ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58