PT-2005-4606 · Unalz · Unalz

Ulf Härnhammer · Publicado 2005-11-29 · Atualizado 2017-07-11 · CVE-2005-3862

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions unalz versions prior to 0.53

Description The issue allows remote attackers to execute arbitrary code via long file names in ALZ archives. This is due to a buffer overflow in the unalz software.

Recommendations For versions prior to 0.53, update to version 0.53 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-3862

DSA-959-1

Produtos afetados

Unalz

Referências · 14

• 🔥 http://securityfocus.com/bid/15577 · Exploit
• 🔥 https://exploit-db.com/exploits/26601 · Exploit
• http://vupen.com/english/advisories/2005/2604 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23267 · Nota
• http://secunia.com/advisories/17774 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-3862 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2005-3862 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-3862 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-3862 · Aviso do Fabricante
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=340842 · Aviso do Fabricante
• http://secunia.com/advisories/18665 · Nota
• http://kipple.pe.kr/win/unalz · Nota
• http://debian.org/security/2006/dsa-959 · Aviso do Fabricante
• http://osvdb.org/21160 · Nota