Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Red Hat Local Security Checks >> RHSA-2004-536: ncompress


Vulnerability Assessment Details

RHSA-2004-536: ncompress

Vulnerability Assessment Summary
Check for the version of the ncompress packages

Detailed Explanation for this Vulnerability Assessment


An updated ncompress package that fixes a buffer overflow and problem in
the handling of files larger than 2 GB is now available.

The ncompress package contains the compress and uncompress file compression
and decompression utilities, which are compatible with the original UNIX
compress utility (.Z file extensions).

A bug in the way ncompress handles long filenames has been discovered.
ncompress versions 4.2.4 and earlier contain a stack based buffer overflow
when handling very long filenames. It is possible that a possible hacker could
execute arbitrary code on a victims machine by tricking the user into
decompressing a carefully crafted filename. The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CVE-2001-1413 to
this issue.

This updated ncompress package also fixes a problem in the handling of
files larger than 2 GB.

All users of ncompress should upgrade to this updated package, which
contains fixes for these issues.




Solution : http://rhn.redhat.com/errata/RHSA-2004-536.html
Network Security Threat Level: High

Networks Security ID:

Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security

Cables, Connectors

SGI Memory 1gb memory kit for Origin 300 350 3000 Tezro A15 Fuel 030-1044-001
$22.99
SGI Memory 1gb memory kit for Origin 300 350 3000 Tezro A15  Fuel  030-1044-001 pictureCrucial 16GB DDR3 SDRAM Memory Module - 16 GB (2 x 8 GB) - DDR3 SDRAM - 1600 ...
$139.94
Crucial 16GB DDR3 SDRAM Memory Module - 16 GB (2 x 8 GB) - DDR3 SDRAM - 1600 ... picture8GB 16GB 32GB 64GB USB Flash Drives Metal Waterproof Pendrive Memory Stick
$11.34
8GB 16GB 32GB 64GB USB Flash Drives Metal Waterproof Pendrive Memory Stick picture8GB 16GB 32GB 64GB USB Flash Drives Metal Waterproof Pendrive Memory Stick
$11.34
8GB 16GB 32GB 64GB USB Flash Drives Metal Waterproof Pendrive Memory Stick picture


Discussions

No Discussions have been posted on this vulnerability.