Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Info-ZIP UnZip Encoded Character Hostile Destination Path Vulnerability

Solution:
Debian have reported that fixes released in the original Debian advisory (DSA 344-1) may not have sufficiently addressed this issue. A revised advisory (DSA 344-2) has been released. Please see the referenced advisory for further details regarding obtaining and applying fixes.

Mandrake has released an updated advisory MDKSA-2003:073-1 with updated fixes to address this issue. See the attached advisory for further details. Users are advised to upgrade as soon as possible.

Conectiva has released a security advisory (CLA-2003:724) containing fixes to address this issue. Users are advised to upgrade as soon as possible.

Immunix has released a security advisory (IMNX-2003-7+-017-01) containing fixes to address this issue. Users are advised to upgrade as soon as possible.

RedHat fixes for this issue have been made available. See the attached advisory for further details.

Conectiva has released a security advisory (CLA-2003:672) containing fixes to address this issue. Users are advised to upgrade as soon as possible.

Mandrake has released advisory MDKSA-2003:073 with fixes to address this issue.

OpenPKG has released advisory OpenPKG-SA-2003.033 to address this issue.

Gentoo has released advisory 200307-02 to address this issue. Vulnerable users are advised to execute the following commands to update affected systems:

emerge sync
emerge unzip
emerge clean

Yellow Dog has released an advisory (YDU-20030710-1) to address this issue. Please see the attached advisory for details on obtaining and applying fixes.

Turbolinux has released an advisory (TLSA-2003-42.txt) to address this issue. Please see the attached advisory for details on obtaining and applying fixes.

Sun has released a fix for Sun Linux 5.0.6.

Sun has also released updated packages for Sun Cobalt Qube3, RaQ4, and RaQXTR.

SCO has released an advisory (CSSA-2003-031.0) for OpenLinux that addresses this issue.


SCO OpenLinux Workstation 3.1.1

SCO OpenLinux Server 3.1.1

Info-ZIP UnZip 5.50







 

Privacy Statement
Copyright 2008, SecurityFocus