PT-2006-1043 · Ncompress+3 · Ncompress+3

Tomas Hoger · Published 2006-08-14 · Updated 2024-06-15 · CVE-2006-1168

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: ncompress versions 4.2.4 busybox versions prior to 1.21.0

Description: The issue affects the decompress function in compress42.c, allowing remote attackers to cause a denial of service, and possibly execute arbitrary code, via crafted data that leads to a buffer underflow. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation can be carried out remotely.

Recommendations: For ncompress version 4.2.4, update to a version that fixes the decompress function issue. For busybox versions prior to 1.21.0, update to version 1.21.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the decompress function in compress42.c to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2015-07432

BDU:2015-09676

CESA-2012_0810

CVE-2006-1168

DSA-1149-1

OPENSUSE-SU-2024:10385-1

RHSA-2006:0663

RHSA-2006_0663

RHSA-2012:0308

RHSA-2012:0810

RHSA-2012_0308

RHSA-2012_0810

Affected Products

Centos

Red Hat

Busybox

Ncompress

References · 50

• http://mandriva.com/security/advisories?name=MDVSA-2012:129 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-1168 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-1168 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-1168 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2012-0810.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:140 · Vendor Advisory
• http://debian.org/security/2006/dsa-1149 · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09676 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2716 · Security Note
• https://bdu.fstec.ru/vul/2015-07432 · Security Note
• http://redhat.com/support/errata/RHSA-2006-0663.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0810.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200610-03.xml · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_20_sr.html · Vendor Advisory