• info
• discussion
• exploit
• solution
• references

Info-ZIP UnZip CHMod File Permission Modification Race Condition Weakness

Solution:
Please see the referenced advisories for more information.


Info-ZIP UnZip 5.50

• Conectiva unzip-5.52-76281U10_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/unzip-5.52-76281U10_2cl.i3 86.rpm


• Debian unzip_5.50-1woody5_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_arm.deb


• Debian unzip_5.50-1woody5_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_hppa.deb


• Debian unzip_5.50-1woody5_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_i386.deb


• Debian unzip_5.50-1woody5_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_ia64.deb


• Debian unzip_5.50-1woody5_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_m68k.deb


• Debian unzip_5.50-1woody5_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_mips.deb


• Debian unzip_5.50-1woody5_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_mipsel.deb


• Debian unzip_5.50-1woody5_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_powerpc.deb


• Debian unzip_5.50-1woody5_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_s390.deb


• Debian unzip_5.50-1woody5_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_sparc.deb


• Debian unzip_5.52-1sarge3_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_alpha.deb


• Debian unzip_5.52-1sarge3_amd64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_amd64.deb


• Debian unzip_5.52-1sarge3_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_i386.deb


• Debian unzip_5.52-1sarge3_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_ia64.deb


• Debian unzip_5.50-1woody4_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_alpha.deb


• Debian unzip_5.50-1woody4_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_arm.deb


• Debian unzip_5.50-1woody4_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_hppa.deb


• Debian unzip_5.50-1woody4_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_i386.deb


• Debian unzip_5.50-1woody4_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_ia64.deb


• Debian unzip_5.50-1woody4_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_m68k.deb


• Debian unzip_5.50-1woody4_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_mips.deb


• Debian unzip_5.50-1woody4_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_mipsel.deb


• Debian unzip_5.50-1woody4_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_powerpc.deb


• Debian unzip_5.50-1woody4_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_s390.deb


• Debian unzip_5.50-1woody4_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_sparc.deb

SCO Open Server 6.0

• SCO 600/VOL.000.000
  ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.39/600