PT-2005-5332 · Info Zip+1 · Unzip+1

C0Ntex · Published 2005-12-31 · Updated 2018-10-19 · CVE-2005-4667

Positive Technologies (AI Summary)

CVSS v2.0

3.7

Low

Base vector

AV:L/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions UnZip versions 5.50 and earlier

Description The issue allows user-assisted attackers to execute arbitrary code via a long filename command line argument. However, since the overflow occurs in a non-setuid program, the risk is relatively low unless UnZip is passed long arguments when invoked from other programs.

Recommendations For UnZip versions 5.50 and earlier, consider avoiding the use of long filename command line arguments until a fix is available. As a temporary workaround, restrict the length of filename arguments passed to UnZip to prevent potential exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2005-4667

DSA-1012-1

RHSA-2007:0203

RHSA-2007_0203

Affected Products

Red Hat

Unzip

References · 21

• 🔥 https://exploit-db.com/exploits/26913 · Exploit
• 🔥 http://securityfocus.com/bid/15968 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0930.html · Exploit
• https://usn.ubuntu.com/248-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4667 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2005-4667 · Vendor Advisory
• http://debian.org/security/2006/dsa-1012 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-4667 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0203.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:050 · Vendor Advisory
• http://securityfocus.com/archive/1/430300/100/0/threaded · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-4667 · Vendor Advisory
• https://usn.ubuntu.com/248-1 · Vendor Advisory
• http://trustix.org/errata/2006/0006 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2007:0203 · Note