Red Hat Security AdvisoryRHSA-2007:0124
file security update
Released 2007-03-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) file-4.17-9.el5, file-4.17-9.el5.i386, file-4.17-9.el5.ia64 +1
- Red Hat Enterprise Linux AS version 4 file-4.10-3.EL4.5, file-4.10-3.EL4.5.i386, file-4.10-3.EL4.5.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) file-4.17-9.el5, file-4.17-9.el5.i386
- Red Hat Enterprise Linux Desktop version 4 file-4.10-3.EL4.5, file-4.10-3.EL4.5.i386
- Red Hat Enterprise Linux ES version 4 file-4.10-3.EL4.5, file-4.10-3.EL4.5.i386, file-4.10-3.EL4.5.ia64
- Red Hat Enterprise Linux WS version 4 file-4.10-3.EL4.5, file-4.10-3.EL4.5.i386, file-4.10-3.EL4.5.ia64
Fixes 1 record
Priority MEDIUM 55
Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execute arbitrary code via a file that triggers a heap-based buffer overflow.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.1355 · Published 2007-03-20 · Fixed CWE-189
