Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Red Hat Local Security Checks >> RHSA-2004-536: ncompress


Vulnerability Assessment Details

RHSA-2004-536: ncompress

Vulnerability Assessment Summary
Check for the version of the ncompress packages

Detailed Explanation for this Vulnerability Assessment


An updated ncompress package that fixes a buffer overflow and problem in
the handling of files larger than 2 GB is now available.

The ncompress package contains the compress and uncompress file compression
and decompression utilities, which are compatible with the original UNIX
compress utility (.Z file extensions).

A bug in the way ncompress handles long filenames has been discovered.
ncompress versions 4.2.4 and earlier contain a stack based buffer overflow
when handling very long filenames. It is possible that a possible hacker could
execute arbitrary code on a victims machine by tricking the user into
decompressing a carefully crafted filename. The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CVE-2001-1413 to
this issue.

This updated ncompress package also fixes a problem in the handling of
files larger than 2 GB.

All users of ncompress should upgrade to this updated package, which
contains fixes for these issues.




Solution : http://rhn.redhat.com/errata/RHSA-2004-536.html
Network Security Threat Level: High

Networks Security ID:

Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security

Cables, Connectors

Clone Dual-Bay USB 3.0 to SATA Hard Drive Docking Station for 2.5' 3.5'' HDD/SSD
$0.01
Clone Dual-Bay USB 3.0 to SATA Hard Drive Docking Station for 2.5' 3.5'' HDD/SSD picture2.5in SATA HDD SSD TO 3.5" HARD DRIVE DISK CONERTER ADAPTER BRACKET MOUNTING New
$9.63
2.5in SATA HDD SSD TO 3.5SAMSUNG 850 EVO 4TB 6Gb/s SATA III 2.5" MZ-75E4T0B V-NAND Solid State Drive
$125.0
SAMSUNG 850 EVO 4TB 6Gb/s SATA III 2.5SATA 2nd SSD HDD 2.5" Hard Drive Caddy For Laptop 12.7mm CD/DVD-ROM Optical Bay
$3.53
SATA 2nd SSD HDD 2.5


Discussions

No Discussions have been posted on this vulnerability.