Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Red Hat Local Security Checks >> RHSA-2004-536: ncompress


Vulnerability Assessment Details

RHSA-2004-536: ncompress

Vulnerability Assessment Summary
Check for the version of the ncompress packages

Detailed Explanation for this Vulnerability Assessment


An updated ncompress package that fixes a buffer overflow and problem in
the handling of files larger than 2 GB is now available.

The ncompress package contains the compress and uncompress file compression
and decompression utilities, which are compatible with the original UNIX
compress utility (.Z file extensions).

A bug in the way ncompress handles long filenames has been discovered.
ncompress versions 4.2.4 and earlier contain a stack based buffer overflow
when handling very long filenames. It is possible that a possible hacker could
execute arbitrary code on a victims machine by tricking the user into
decompressing a carefully crafted filename. The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CVE-2001-1413 to
this issue.

This updated ncompress package also fixes a problem in the handling of
files larger than 2 GB.

All users of ncompress should upgrade to this updated package, which
contains fixes for these issues.




Solution : http://rhn.redhat.com/errata/RHSA-2004-536.html
Network Security Threat Level: High

Networks Security ID:

Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security

Cables, Connectors

Cisco WS-C2960X-24TS-L 24 Port Gigabit Switch Grade A Tested 2960X
$349.99
Cisco WS-C2960X-24TS-L 24 Port Gigabit Switch Grade A Tested 2960X pictureNew Sealed Cisco WS-C3750X-48PF-L 48 Port Gigabit Ethernet PoE+ Stack Switch HSS
$1300.0
New Sealed Cisco WS-C3750X-48PF-L 48 Port Gigabit Ethernet PoE+ Stack Switch HSS pictureLegrand Cisco GLC-LH-SM 1000Base-LX SMF SFP mini-GBIC Transceiver
$242.48
Legrand Cisco GLC-LH-SM 1000Base-LX SMF SFP mini-GBIC Transceiver pictureCPAK-100G-SR10 Transceiver module. 100m OM3 MMF (NEW SEALED)
$250.0
CPAK-100G-SR10 Transceiver module. 100m OM3 MMF (NEW SEALED)  picture


Discussions

No Discussions have been posted on this vulnerability.