PT-2004-1120 · Unrarj Team · Unarj

Publicado 2004-11-24 · Atualizado 2023-03-24 · CVE-2004-0947

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions unarj versions prior to 2.63a-r2

Description The issue is caused by a buffer overflow in the unarj library, which handles data archiving. This can be exploited by a remote attacker to execute arbitrary code using an arj archive containing files with excessively long filenames.

Recommendations For versions prior to 2.63a-r2, update to version 2.63a-r2 or later to resolve the issue. As a temporary workaround, consider avoiding the use of arj archives with long filenames until the update is applied.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2017-00282

CVE-2004-0947

DSA-652-1

MGASA-2023-0107

Produtos afetados

Unarj

Referências · 12

• http://lwn.net/Articles/121827 · Aviso do Fabricante
• http://gentoo.org/security/en/glsa/glsa-200411-29.xml · Aviso do Fabricante
• http://debian.org/security/2005/dsa-652 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2017-00282 · Nota de Segurança
• https://advisories.mageia.org/MGASA-2023-0107.html · Nota de Segurança
• http://securityfocus.com/bid/11665 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0947 · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2023-0107 · Aviso do Fabricante
• http://xforce.iss.net/xforce/xfdb/18044 · Nota
• http://redhat.com/support/errata/RHSA-2005-007.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18044 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=31546 · Nota