| ID |
CVE-2004-1010
|
| Summary |
Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 10.0 (as of 03-10-2018 - 21:29) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| COMPLETE |
COMPLETE |
COMPLETE |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
| oval
via4
|
| accepted | 2013-04-29T04:22:44.965-04:00 | | class | vulnerability | | contributors | | name | Aharon Chernin | | organization | SCAP.com, LLC |
| name | Dragos Prisaca | | organization | G2, Inc. |
| | definition_extensions | | comment | The operating system installed on the system is Red Hat Enterprise Linux 3 | | oval | oval:org.mitre.oval:def:11782 |
| comment | CentOS Linux 3.x | | oval | oval:org.mitre.oval:def:16651 |
| | description | Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname. | | family | unix | | id | oval:org.mitre.oval:def:9848 | | status | accepted | | submitted | 2010-07-09T03:56:16-04:00 | | title | Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname. | | version | 28 |
|
| redhat
via4
|
| advisories | | | rpms | - zip-0:2.3-16.1
- zip-debuginfo-0:2.3-16.1
|
|
| refmap
via4
|
| bid | 11603 | | bugtraq | 20041103 [HV-MED] Zip/Linux long path buffer overflow | | ciac | P-072 | | confirm | http://www.info-zip.org/FAQ.html | | debian | DSA-624 | | fedora | FLSA:2255 | | fulldisc | 20041103 [HV-MED] Zip/Linux long path buffer overflow | | gentoo | GLSA-200411-16 | | mandrake | MDKSA-2004:141 | | misc | http://www.hexview.com/docs/20041103-1.txt | | secunia | 13094 | | turbo | TLSA-2005-18 | | ubuntu | USN-18-1 | | xf | infozip-compressed-folder-bo(17956) |
|
| Last major update |
03-10-2018 - 21:29 |
| Published |
01-03-2005 - 05:00 |
| Last modified |
03-10-2018 - 21:29 |
