• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

CHM Lib Extract_chmlib Directory Traversal Vulnerability

Solution:
The vendor has addressed this issue in version 0.38. Please contact the vendor for details on obtaining the appropriate updates.

See the referenced advisories for more information.


CHM Lib CHM Lib 0.35

• Debian chmlib-bin_0.35-6sarge3_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge3_alpha.deb


• Debian chmlib-bin_0.35-6sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge3_amd64.deb


• Debian chmlib-bin_0.35-6sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge3_arm.deb


• Debian chmlib-bin_0.35-6sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge3_hppa.deb


• Debian chmlib-bin_0.35-6sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge3_i386.deb


• Debian chmlib-bin_0.35-6sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge3_ia64.deb


• Debian chmlib-bin_0.35-6sarge3_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge3_m68k.deb


• Debian chmlib-bin_0.35-6sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge3_mips.deb


• Debian chmlib-bin_0.35-6sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge3_mipsel.deb


• Debian chmlib-bin_0.35-6sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge3_powerpc.deb


• Debian chmlib-bin_0.35-6sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge3_s390.deb


• Debian chmlib-bin_0.35-6sarge3_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-bin_0.35- 6sarge3_sparc.deb


• Debian chmlib-dev_0.35-6sarge3_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge3_alpha.deb


• Debian chmlib-dev_0.35-6sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge3_amd64.deb


• Debian chmlib-dev_0.35-6sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge3_arm.deb


• Debian chmlib-dev_0.35-6sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge3_hppa.deb


• Debian chmlib-dev_0.35-6sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge3_i386.deb


• Debian chmlib-dev_0.35-6sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge3_ia64.deb


• Debian chmlib-dev_0.35-6sarge3_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge3_m68k.deb


• Debian chmlib-dev_0.35-6sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge3_mips.deb


• Debian chmlib-dev_0.35-6sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge3_mipsel.deb


• Debian chmlib-dev_0.35-6sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge3_powerpc.deb


• Debian chmlib-dev_0.35-6sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge3_s390.deb


• Debian chmlib-dev_0.35-6sarge3_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib-dev_0.35- 6sarge3_sparc.deb


• Debian chmlib_0.35-6sarge3_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge3_alpha.deb


• Debian chmlib_0.35-6sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge3_amd64.deb


• Debian chmlib_0.35-6sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge3_arm.deb


• Debian chmlib_0.35-6sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge3_hppa.deb


• Debian chmlib_0.35-6sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge3_i386.deb


• Debian chmlib_0.35-6sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge3_ia64.deb


• Debian chmlib_0.35-6sarge3_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge3_m68k.deb


• Debian chmlib_0.35-6sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge3_mips.deb


• Debian chmlib_0.35-6sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge3_mipsel.deb


• Debian chmlib_0.35-6sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge3_powerpc.deb


• Debian chmlib_0.35-6sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge3_s390.deb


• Debian chmlib_0.35-6sarge3_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/chmlib/chmlib_0.35-6sar ge3_sparc.deb

CHM Lib CHM Lib 0.37

• CHM Lib chmlib-0.38.tar.gz
  http://morte.jedrea.com/~jedwin/projects/chmlib/chmlib-0.38.tar.gz

CHM Lib CHM Lib 0.36

• CHM Lib chmlib-0.38.tar.gz
  http://morte.jedrea.com/~jedwin/projects/chmlib/chmlib-0.38.tar.gz