Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Red Hat Local Security Checks >> RHSA-2004-536: ncompress


Vulnerability Assessment Details

RHSA-2004-536: ncompress

Vulnerability Assessment Summary
Check for the version of the ncompress packages

Detailed Explanation for this Vulnerability Assessment


An updated ncompress package that fixes a buffer overflow and problem in
the handling of files larger than 2 GB is now available.

The ncompress package contains the compress and uncompress file compression
and decompression utilities, which are compatible with the original UNIX
compress utility (.Z file extensions).

A bug in the way ncompress handles long filenames has been discovered.
ncompress versions 4.2.4 and earlier contain a stack based buffer overflow
when handling very long filenames. It is possible that a possible hacker could
execute arbitrary code on a victims machine by tricking the user into
decompressing a carefully crafted filename. The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CVE-2001-1413 to
this issue.

This updated ncompress package also fixes a problem in the handling of
files larger than 2 GB.

All users of ncompress should upgrade to this updated package, which
contains fixes for these issues.




Solution : http://rhn.redhat.com/errata/RHSA-2004-536.html
Network Security Threat Level: High

Networks Security ID:

Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security

Cables, Connectors

EliteGroup Computer Motherboard 848P-A Intel 848P-A
$65.0
EliteGroup Computer Motherboard 848P-A Intel 848P-A pictureHP Z240 Workstation MotherBoard L1151 FXN1 E93839
$29.99
HP Z240 Workstation MotherBoard L1151  FXN1 E93839  pictureAsus S400C S400CA Laptop Motherboard 4GB w/ i5-3317U 1.7Ghz CPU 60NB0050-MB7010
$137.0
Asus S400C S400CA Laptop Motherboard 4GB w/ i5-3317U 1.7Ghz CPU 60NB0050-MB7010 pictureECS G41T-M7, Intel Socket 775 Motherboard - New in Factory Box
$50.0
ECS G41T-M7, Intel Socket 775 Motherboard - New in Factory Box picture


Discussions

No Discussions have been posted on this vulnerability.