• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

bzip2 Decompression File Overwrite Vulnerability

Solution:
Upgrades are available:


bzip2 bzip2 0.9 c

• bzip2 bzip2 1.0.2
  http://sources.redhat.com/bzip2/index.html#bzip2-latest

bzip2 bzip2 0.9 b

• bzip2 bzip2 1.0.2
  http://sources.redhat.com/bzip2/index.html#bzip2-latest

bzip2 bzip2 0.9

• bzip2 bzip2 1.0.2
  http://sources.redhat.com/bzip2/index.html#bzip2-latest

bzip2 bzip2 0.9 a

• bzip2 bzip2 1.0.2
  http://sources.redhat.com/bzip2/index.html#bzip2-latest

bzip2 bzip2 0.9.5 a

• bzip2 bzip2 1.0.2
  http://sources.redhat.com/bzip2/index.html#bzip2-latest

bzip2 bzip2 0.9.5 b

• bzip2 bzip2 1.0.2
  http://sources.redhat.com/bzip2/index.html#bzip2-latest

bzip2 bzip2 0.9.5 d

• bzip2 bzip2 1.0.2
  http://sources.redhat.com/bzip2/index.html#bzip2-latest

bzip2 bzip2 0.9.5 c

• bzip2 bzip2 1.0.2
  http://sources.redhat.com/bzip2/index.html#bzip2-latest

bzip2 bzip2 1.0

• bzip2 bzip2 1.0.2
  http://sources.redhat.com/bzip2/index.html#bzip2-latest


• SCO bzip2-1.0.0-7MR.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-039.0/R PMS/bzip2-1.0.0-7MR.i386.rpm


• SCO bzip2-1.0.0-7MR.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2002-03 9.0/RPMS/bzip2-1.0.0-7MR.i386.rpm


• SCO bzip2-1.0.0-7MR.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-039.0/RPM S/bzip2-1.0.0-7MR.i386.rpm


• SCO bzip2-1.0.0-7MR.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2002-039. 0/RPMS/bzip2-1.0.0-7MR.i386.rpm


• SCO bzip2-devel-1.0.0-7MR.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-039.0/R PMS/bzip2-devel-1.0.0-7MR.i386.rpm


• SCO bzip2-devel-1.0.0-7MR.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2002-03 9.0/RPMS/bzip2-devel-1.0.0-7MR.i386.rpm


• SCO bzip2-devel-1.0.0-7MR.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-039.0/RPM S/bzip2-devel-1.0.0-7MR.i386.rpm


• SCO bzip2-devel-1.0.0-7MR.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2002-039. 0/RPMS/bzip2-devel-1.0.0-7MR.i386.rpm


• SCO bzip2-devel-static-1.0.0-7MR.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2002-039.0/R PMS/bzip2-devel-static-1.0.0-7MR.i386.rpm


• SCO bzip2-devel-static-1.0.0-7MR.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2002-03 9.0/RPMS/bzip2-devel-static-1.0.0-7MR.i386.rpm


• SCO bzip2-devel-static-1.0.0-7MR.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2002-039.0/RPM S/bzip2-devel-static-1.0.0-7MR.i386.rpm


• SCO bzip2-devel-static-1.0.0-7MR.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2002-039. 0/RPMS/bzip2-devel-static-1.0.0-7MR.i386.rpm

bzip2 bzip2 1.0.1

• bzip2 bzip2 1.0.2
  http://sources.redhat.com/bzip2/index.html#bzip2-latest


• FreeBSD security-patch-bzip2-02.25.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/packages/SA-02.25/security-patc h-bzip2-02.25.tgz


• Trustix bzip2-1.0.2-2tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.1/RPMS/bzip2-1.0.2-2tr.i58 6.rpm


• Trustix bzip2-1.0.2-2tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.2/RPMS/bzip2-1.0.2-2tr.i58 6.rpm


• Trustix bzip2-1.0.2-2tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/bzip2-1.0.2-2tr.i58 6.rpm