Red Hat Security AdvisoryRHSA-2007:0391
file security update
Released 2007-05-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) file-4.17-9.0.1.el5, file-4.17-9.0.1.el5.i386, file-4.17-9.0.1.el5.ia64 +1
- Red Hat Enterprise Linux AS version 4 file-4.10-3.0.2.el4, file-4.10-3.0.2.el4.i386, file-4.10-3.0.2.el4.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) file-4.17-9.0.1.el5, file-4.17-9.0.1.el5.i386
- Red Hat Enterprise Linux Desktop version 4 file-4.10-3.0.2.el4, file-4.10-3.0.2.el4.i386
- Red Hat Enterprise Linux ES version 4 file-4.10-3.0.2.el4, file-4.10-3.0.2.el4.i386, file-4.10-3.0.2.el4.ia64
- Red Hat Enterprise Linux WS version 4 file-4.10-3.0.2.el4, file-4.10-3.0.2.el4.i386, file-4.10-3.0.2.el4.ia64
Fixes 1 record
Priority LOW 28
Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an o…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.02702 · Published 2007-05-23 · Fixed CWE-189
