Red Hat Security AdvisoryRHSA-2007:0203
unzip security and bug fix update
Released 2007-05-01 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 unzip-5.51-9.EL4.5, unzip-5.51-9.EL4.5.i386, unzip-5.51-9.EL4.5.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 unzip-5.51-9.EL4.5, unzip-5.51-9.EL4.5.i386
- Red Hat Enterprise Linux ES version 4 unzip-5.51-9.EL4.5, unzip-5.51-9.EL4.5.i386, unzip-5.51-9.EL4.5.ia64
- Red Hat Enterprise Linux WS version 4 unzip-5.51-9.EL4.5, unzip-5.51-9.EL4.5.i386, unzip-5.51-9.EL4.5.ia64
Fixes 2 records
Priority LOW 21
Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename command line argument.
CVSS 2.0LOW 3.7· Local · No auth · Interaction — · EPSS 0.01518 · Published 2006-01-25 · Fixed CWE-119
Priority LOW 8
Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is…
CVSS 2.0LOW 1.2· Local · No auth · Interaction — · EPSS 0.00399 · Published 2005-08-05 · Fixed
