• info
• discussion
• exploit
• solution
• references

Zlib Compression Library gzprintf() Buffer Overrun Vulnerability

Solution:
Please see the references for more information.


zlib zlib 1.1.4

• Kelledin zlib-1.1.4-3-vsnprintf.patch
  http://www.securityfocus.com/data/vulnerabilities/patches/zlib-1.1.4-3 -vsnprintf.patch


• Mandrake zlib-1.1.4-5.1mdk.src.rpm
  Corporate Server 2.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake zlib-1.1.4-5.1mdk.src.rpm
  Mandrake Linux 9.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake zlib1-1.1.4-5.1mdk.i586.rpm
  Corporate Server 2.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake zlib1-1.1.4-5.1mdk.i586.rpm
  Mandrake Linux 9.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake zlib1-devel-1.1.4-5.1mdk.i586.rpm
  Corporate Server 2.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake zlib1-devel-1.1.4-5.1mdk.i586.rpm
  Mandrake Linux 9.0
  http://www.mandrakesecure.net/en/ftp.php


• NetBSD SA2003-004-zlib-1.5.patch
  NetBSD 1.5 tree
  ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2003-004-zlib-1.5.p atch


• NetBSD SA2003-004-zlib-1.6.patch
  NetBSD 1.6
  ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2003-004-zlib-1.6.p atch


• Red Hat zlib-1.1.4-8.7x.i386.rpm
  Red Hat Linux 7.1
  ftp://updates.redhat.com/7.1/en/os/i386/zlib-1.1.4-8.7x.i386.rpm


• Red Hat zlib-1.1.4-8.7x.i386.rpm
  Red Hat Linux 7.2
  ftp://updates.redhat.com/7.2/en/os/i386/zlib-1.1.4-8.7x.i386.rpm


• Red Hat zlib-1.1.4-8.7x.i386.rpm
  Red Hat Linux 7.3
  ftp://updates.redhat.com/7.3/en/os/i386/zlib-1.1.4-8.7x.i386.rpm


• Red Hat zlib-1.1.4-8.7x.ia64.rpm
  Red Hat Linux 7.2
  ftp://updates.redhat.com/7.2/en/os/ia64/zlib-1.1.4-8.7x.ia64.rpm


• Red Hat zlib-1.1.4-8.8x.i386.rpm
  Red Hat Linux 8.0
  ftp://updates.redhat.com/8.0/en/os/i386/zlib-1.1.4-8.8x.i386.rpm


• Red Hat zlib-devel-1.1.4-8.7x.i386.rpm
  Red Hat Linux 7.1
  ftp://updates.redhat.com/7.1/en/os/i386/zlib-devel-1.1.4-8.7x.i386.rpm


• Red Hat zlib-devel-1.1.4-8.7x.i386.rpm
  Red Hat Linux 7.2
  ftp://updates.redhat.com/7.2/en/os/i386/zlib-devel-1.1.4-8.7x.i386.rpm


• Red Hat zlib-devel-1.1.4-8.7x.i386.rpm
  Red Hat Linux 7.3
  ftp://updates.redhat.com/7.3/en/os/i386/zlib-devel-1.1.4-8.7x.i386.rpm


• Red Hat zlib-devel-1.1.4-8.7x.ia64.rpm
  Red Hat Linux 7.2
  ftp://updates.redhat.com/7.2/en/os/ia64/zlib-devel-1.1.4-8.7x.ia64.rpm


• Red Hat zlib-devel-1.1.4-8.8x.i386.rpm
  Red Hat Linux 8.0
  ftp://updates.redhat.com/8.0/en/os/i386/zlib-devel-1.1.4-8.8x.i386.rpm


• Sun Qube3-All-Security-4.0.1-16487.pkg
  Sun Cobalt Qube3.
  http://ftp.cobalt.sun.com/pub/packages/qube3/ml/Qube3-All-Security-4.0 .1-16487.pkg


• Sun RaQ4-All-Security-2.0.1-16487.pkg
  Sun Cobalt RaQ4.
  http://ftp.cobalt.sun.com/pub/packages/raq4/eng/RaQ4-All-Security-2.0. 1-16487.pkg


• Sun RaQXTR-All-Security-1.0.1-16487.pkg
  Sun Cobalt RaQXTR.
  http://ftp.cobalt.sun.com/pub/packages/raqxtr/eng/RaQXTR-All-Security- 1.0.1-16487.pkg

Sun SunOS 5.9

• Sun 114014-06
  http://sunsolve.sun.com/pub-cgi/pdownload.pl?target=114014-06&method=f


• Sun 115754-02
  http://sunsolve.sun.com/pub-cgi/pdownload.pl?target=115754-02&method=h

Sun SunOS 5.9 _x86

• Sun 114015-06
  http://sunsolve.sun.com/pub-cgi/pdownload.pl?target=114015-06&method=f


• Sun 115755-02
  http://sunsolve.sun.com/pub-cgi/pdownload.pl?target=115755-02&method=h