1. CVE-Search
  2. CVE-2005-3862
ID CVE-2005-3862
Summary Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives.
References
Vulnerable Configurations
  • cpe:2.3:a:unalz:unalz:0.2:*:*:*:*:*:*:*
    cpe:2.3:a:unalz:unalz:0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:unalz:unalz:0.3:*:*:*:*:*:*:*
    cpe:2.3:a:unalz:unalz:0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:unalz:unalz:0.4:*:*:*:*:*:*:*
    cpe:2.3:a:unalz:unalz:0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:unalz:unalz:0.5:*:*:*:*:*:*:*
    cpe:2.3:a:unalz:unalz:0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:unalz:unalz:0.22:*:*:*:*:*:*:*
    cpe:2.3:a:unalz:unalz:0.22:*:*:*:*:*:*:*
  • cpe:2.3:a:unalz:unalz:0.23:*:*:*:*:*:*:*
    cpe:2.3:a:unalz:unalz:0.23:*:*:*:*:*:*:*
  • cpe:2.3:a:unalz:unalz:0.31:*:*:*:*:*:*:*
    cpe:2.3:a:unalz:unalz:0.31:*:*:*:*:*:*:*
  • cpe:2.3:a:unalz:unalz:0.51:*:*:*:*:*:*:*
    cpe:2.3:a:unalz:unalz:0.51:*:*:*:*:*:*:*
  • cpe:2.3:a:unalz:unalz:0.52:*:*:*:*:*:*:*
    cpe:2.3:a:unalz:unalz:0.52:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 11-07-2017 - 01:33)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 15577
confirm http://www.kipple.pe.kr/win/unalz/
debian DSA-959
misc http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=340842
osvdb 21160
secunia
  • 17774
  • 18665
vupen ADV-2005-2604
xf unalz-alz-archive-bo(23267)
Last major update 11-07-2017 - 01:33
Published 29-11-2005 - 11:03
Last modified 11-07-2017 - 01:33
Back to Top