CVE-2005-1849
CVSS5.0
发布时间 :2005-07-26 00:00:00
修订时间 :2011-03-07 21:22:59
NMCOPS    

[原文]inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.


[CNNVD]Zlib inftrees.h 拒绝服务攻击漏洞(CNNVD-200507-258)

        zlib是很多应用程序都在使用的压缩库,提供数据压缩/解压例程。
        Zlib中存在拒绝服务漏洞。攻击者通过让zlib打开无效文件,可能使应用程序崩溃而导致拒绝服务。

- CVSS (基础分值)

CVSS分值: 5 [中等(MEDIUM)]
机密性影响: NONE [对系统的机密性无影响]
完整性影响: NONE [不会对系统完整性产生影响]
可用性影响: PARTIAL [可能会导致性能下降或中断资源访问]
攻击复杂度: LOW [漏洞利用没有访问限制 ]
攻击向量: [--]
身份认证: NONE [漏洞利用无需身份认证]

- CPE (受影响的平台与产品)

产品及版本信息(CPE)暂不可用

- OVAL (用于检测的技术细节)

oval:org.mitre.oval:def:11402inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dy...
*OVAL详细的描述了检测该漏洞的方法,你可以从相关的OVAL定义中找到更多检测该漏洞的技术细节。

- 官方数据库链接

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1849
(官方数据源) MITRE
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-1849
(官方数据源) NVD
http://www.cnnvd.org.cn/vulnerability/show/cv_cnnvdid/CNNVD-200507-258
(官方数据源) CNNVD

- 其它链接及资源

http://www.debian.org/security/2005/dsa-763
(VENDOR_ADVISORY)  DEBIAN  DSA-763
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680
(UNKNOWN)  FEDORA  FLSA:162680
http://xforce.iss.net/xforce/xfdb/21456
(UNKNOWN)  XF  zlib-codetable-dos(21456)
http://www.vupen.com/english/advisories/2007/1267
(UNKNOWN)  VUPEN  ADV-2007-1267
http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html
(UNKNOWN)  CONFIRM  http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html
http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html
(UNKNOWN)  CONFIRM  http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html
http://www.ubuntulinux.org/usn/usn-151-3
(UNKNOWN)  UBUNTU  USN-151-3
http://www.securityfocus.com/bid/14340
(UNKNOWN)  BID  14340
http://www.securityfocus.com/archive/1/archive/1/464745/100/0/threaded
(UNKNOWN)  BUGTRAQ  20070404 VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates
http://www.redhat.com/support/errata/RHSA-2008-0629.html
(UNKNOWN)  REDHAT  RHSA-2008:0629
http://www.redhat.com/support/errata/RHSA-2005-584.html
(UNKNOWN)  REDHAT  RHSA-2005:584
http://www.osvdb.org/18141
(UNKNOWN)  OSVDB  18141
http://www.novell.com/linux/security/advisories/2005_43_zlib.html
(UNKNOWN)  SUSE  SUSE-SA:2005:043
http://www.mandriva.com/security/advisories?name=MDKSA-2006:070
(UNKNOWN)  MANDRIVA  MDKSA-2006:070
http://www.mandriva.com/security/advisories?name=MDKSA-2005:196
(UNKNOWN)  MANDRIVA  MDKSA-2005:196
http://www.gentoo.org/security/en/glsa/glsa-200603-18.xml
(UNKNOWN)  GENTOO  GLSA-200603-18
http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml
(UNKNOWN)  GENTOO  GLSA-200509-18
http://www.debian.org/security/2006/dsa-1026
(UNKNOWN)  DEBIAN  DSA-1026
http://www.debian.org/security/2005/dsa-797
(UNKNOWN)  DEBIAN  DSA-797
http://securitytracker.com/id?1014540
(UNKNOWN)  SECTRACK  1014540
http://security.debian.org/pool/updates/main/z/zlib/zlib_1.2.2-4.sarge.2.diff.gz
(UNKNOWN)  MISC  http://security.debian.org/pool/updates/main/z/zlib/zlib_1.2.2-4.sarge.2.diff.gz
http://secunia.com/advisories/31492
(VENDOR_ADVISORY)  SECUNIA  31492
http://secunia.com/advisories/24788
(VENDOR_ADVISORY)  SECUNIA  24788
http://secunia.com/advisories/19597
(VENDOR_ADVISORY)  SECUNIA  19597
http://secunia.com/advisories/19550
(VENDOR_ADVISORY)  SECUNIA  19550
http://secunia.com/advisories/19334
(VENDOR_ADVISORY)  SECUNIA  19334
http://secunia.com/advisories/18377
(VENDOR_ADVISORY)  SECUNIA  18377
http://secunia.com/advisories/17516
(VENDOR_ADVISORY)  SECUNIA  17516
http://secunia.com/advisories/17326
(VENDOR_ADVISORY)  SECUNIA  17326
http://secunia.com/advisories/16137
(VENDOR_ADVISORY)  SECUNIA  16137
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
(UNKNOWN)  APPLE  APPLE-SA-2005-08-15
http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
(UNKNOWN)  APPLE  APPLE-SA-2005-08-17
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt
(UNKNOWN)  SCO  SCOSA-2006.6

- 漏洞信息

Zlib inftrees.h 拒绝服务攻击漏洞
中危 资料不足
2005-07-26 00:00:00 2009-01-23 00:00:00
远程※本地  
        zlib是很多应用程序都在使用的压缩库,提供数据压缩/解压例程。
        Zlib中存在拒绝服务漏洞。攻击者通过让zlib打开无效文件,可能使应用程序崩溃而导致拒绝服务。

- 公告与补丁

        目前厂商已经发布了升级补丁以修复此安全问题,补丁获取链接:
        http://www.zlib.net/

- 漏洞信息 (F55667)

VMware Security Advisory 2007-0003 (PacketStormID:F55667)
2007-04-05 00:00:00
VMware  vmware.com
advisory
CVE-2005-3011,CVE-2006-4810,CVE-2007-1270,CVE-2007-1271,CVE-2005-2096,CVE-2005-1849,CVE-2003-0107,CVE-2005-1704
[点击下载]

VMware Security Advisory - ESX 3.0.1 and 3.0.0 patches address several security issues.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------
                   VMware Security Advisory

Advisory ID:       VMSA-2007-0003
Synopsis:          VMware ESX 3.0.1 and 3.0.0 server security updates
Issue date:        2007-04-02
Updated on:        2007-04-02
CVE numbers:       CVE-2005-3011 CVE-2006-4810 CVE-2007-1270
                   CVE-2007-1271 CVE-2005-2096 CVE-2005-1849
                   CVE-2003-0107 CVE-2005-1704
- -------------------------------------------------------------------

1. Summary:

ESX 3.0.1 and 3.0.0 patches address several security issues.

2. Relevant releases:

VMware ESX 3.0.1 without patches ESX-2559638, ESX-1161870, ESX-3416571,
ESX-5011126, ESX-7737432, ESX-7780490, ESX-8174018, ESX-8852210,
ESX-9617902,
ESX-9916286

VMware ESX 3.0.0 without patches ESX-1121906, ESX-131737, ESX-1870154,
ESX-392718, ESX-4197945, ESX-4921691, ESX-5752668, ESX-7052426, ESX-3616065

3. Problem description:

Problems addressed by these patches:

a.   texinfo service console update

     Updated texinfo packages for the service console fix two security
     vulnerabilities are now available.  A buffer overflow in the the
     program texinfo could allow local user to execute arbitrary code in
     the service console via a crafted texinfo file.  And could allow a
     local user to overwrite arbitrary files via a symlink attack on
     temporary files.

     The Common Vulnerabilities and Exposures project (cve.mitre.org)
     has assigned the names CVE-2005-3011 and CVE-2006-4810 to these
     issues.

     ESX 301 Download Patch ESX-2559638
     ESX 300 Download Patch ESX-1121906

b.   This bundle is a group of patches to resolve two possible security
issues.

     They are as follows:
     A VMware internal security audit revealed a double free condition.
     It may be possible for an attacker to influence the operation of
     the system. In most circumstances, this influence will be limited
     to denial of service or information leakage, but it is
     theoretically possible for an attacker to insert arbitrary code
     into a running program. This code would be executed with the
     permissions of the vulnerable program.  There are no known exploits
     for this issue.

     The Common Vulnerabilities and Exposures project (cve.mitre.org)
     has assigned the name CVE-2007-1270 to this issue.

     A VMware internal security audit revealed a potential buffer
     overflow condition. There are no known vulnerabilities, but such
     vulnerabilities may be used to elevate privileges or to crash the
     application and thus cause a denial of service.

     The Common Vulnerabilities and Exposures project (cve.mitre.org)
     has assigned the name CVE-2007-1271 to this issue.

     The following patches are contained within this bundle:

     ESX 301                      ESX 300
     -------                     --------
     ESX-1161870                  ESX-131737
     ESX-3416571                  ESX-1870154
     ESX-5011126                  ESX-392718
     ESX-7737432                  ESX-4197945
     ESX-7780490                  ESX-4921691
     ESX-8174018                  ESX-5752668
     ESX-8852210                  ESX-7052426
     ESX-9617902                  ESX-9976400

     ESX 301 Download Patch Bundle ESX-6431040
     ESX 300 Download Patch Bundle ESX-5754280

c.   This patch updates internally used zlib libraries in order to
     address potential security issues with older versions of this
     library.

     The Common Vulnerabilities and Exposures project (cve.mitre.org)
     has assigned the names CVE-2005-2096, CVE-2005-1849, CVE-2003-0107
     to these issues.

     ESX 301 Download Patch ESX-9916286
     ESX 300 Download Patch ESX-3616065

d.  binutils service console update

     NOTE: This vulnerability and update only apply to ESX 3.0.0.

     A integer overflow in the Binary File Descriptor (BFD) library for
     the GNU Debugger before version 6.3, binutils, elfutils, and
     possibly other packages, allows user-assisted attackers to execute
     arbitrary code via a crafted object file that specifies a large
     number of section headers, leading to a heap-based buffer overflow.

     The Common Vulnerabilities and Exposures project (cve.mitre.org)
     has assigned the name CVE-2005-1704 to this issue.

     ESX 300 Download Patch ESX-55052

4. Solution:

Please review the Patch notes for your version of ESX and verify the
md5sum of your downloaded file.

  ESX 3.0.1
  http://www.vmware.com/support/vi3/doc/esx-2559638-patch.html
  md5sum 9ee9d9769dfe2668aa6a4be2df284ea6

  http://www.vmware.com/support/vi3/doc/esx-6431040-patch.html
  md5sum ef6bc745b3d556e0736fd39b8ddc8087

  http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html
  md5sum 7b98cfe1b2e0613c368d4080dcacccb8

  ESX 3.0.0
  http://www.vmware.com/support/vi3/doc/esx-55052-patch.html
  md5sum 8d45e36ec997707ebe68d84841026fef

  http://www.vmware.com/support/vi3/doc/esx-1121906-patch.html
  md5sum 02c5bcccea156dd0db93177e5e3fab8b

  http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html
  md5sum 90e4face2edaab07080531a37a49ec01

  http://www.vmware.com/support/vi3/doc/esx-5754280-patch.html
  md5sum 82b3c7e18dd1422f30c4aa9e477c6a27

5. References:

  ESX 3.0.1

Patch URL:http://www.vmware.com/support/vi3/doc/esx-2559638-patch.html
Patch URL:http://www.vmware.com/support/vi3/doc/esx-6431040-patch.html
Patch URL:http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html
Knowledge base URL:http://kb.vmware.com/kb/2559638
Knowledge base URL:http://kb.vmware.com/kb/6431040
Knowledge base URL:http://kb.vmware.com/kb/9916286

  ESX 3.0.0

Patch URL:http://www.vmware.com/support/vi3/doc/esx-55052-patch.html
Patch URL:http://www.vmware.com/support/vi3/doc/esx-1121906-patch.html
Patch URL:http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html
Patch URL:http://www.vmware.com/support/vi3/doc/esx-5754280-patch.html
Knowledge base URL:http://kb.vmware.com/kb/55052
Knowledge base URL:http://kb.vmware.com/kb/1121906
Knowledge base URL:http://kb.vmware.com/kb/3616065
Knowledge base URL:http://kb.vmware.com/kb/55052


  CVE numbers

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3011
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4810
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1270
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1271
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2096
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1849
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0107
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1704

6. Contact:

http://www.vmware.com/security

VMware Security Response Policy
http://www.vmware.com/vmtn/technology/security/security_response.html

E-mail:  security@vmware.com

Copyright 2007 VMware Inc. All rights reserved.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGFAiH6KjQhy2pPmkRCDhvAJ9IdzXG4Ino7NGYPnRvW5ZLFMdhRgCgk1Rr
bGpwMyFZk0OMLWyA/L8PODQ=
=MjIU
-----END PGP SIGNATURE-----
    

- 漏洞信息 (F41077)

Ubuntu Security Notice 151-3 (PacketStormID:F41077)
2005-10-31 00:00:00
Ubuntu  security.ubuntu.com
advisory,denial of service,arbitrary,code execution
linux,ubuntu
CVE-2005-1849,CVE-2005-2096
[点击下载]

Ubuntu Security Notice USN-151-3 - USN-148-1 and USN-151-1 fixed two security flaws in zlib, which could be exploited to cause Denial of Service attacks or even arbitrary code execution with malicious data streams. Since aide is statically linked against the zlib library, it is also affected by these issues.

===========================================================
Ubuntu Security Notice USN-151-3	   October 28, 2005
aide vulnerabilities
CVE-2005-1849, CVE-2005-2096
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 4.10 (Warty Warthog)
Ubuntu 5.04 (Hoary Hedgehog)
Ubuntu 5.10 (Breezy Badger)

The following packages are affected:

aide

The problem can be corrected by upgrading the affected package to
version 0.10-3ubuntu0.1 (for Ubuntu 4.10), 0.10-4ubuntu0.1 (for Ubuntu
5.04), or 0.10-6.1ubuntu0.1 (for Ubuntu 5.10).  In general, a standard
system upgrade is sufficient to effect the necessary changes.

Details follow:

USN-148-1 and USN-151-1 fixed two security flaws in zlib, which could
be exploited to cause Denial of Service attacks or even arbitrary code
execution with malicious data streams.

Since aide is statically linked against the zlib library, it is also
affected by these issues. The updated packagages have been rebuilt
against the fixed zlib.

Updated packages for Ubuntu 4.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/a/aide/aide_0.10-3ubuntu0.1.diff.gz
      Size/MD5:    28081 d569b7974a6204481346128876a0a530
    http://security.ubuntu.com/ubuntu/pool/main/a/aide/aide_0.10-3ubuntu0.1.dsc
      Size/MD5:      703 cc5158a58a35e46dfc0bee0b0a34380b
    http://security.ubuntu.com/ubuntu/pool/main/a/aide/aide_0.10.orig.tar.gz
      Size/MD5:   234184 39eb7d21064cac7b409c45d038b86cd8

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

    http://security.ubuntu.com/ubuntu/pool/main/a/aide/aide_0.10-3ubuntu0.1_amd64.deb
      Size/MD5:   413050 086e1a2279c3cd8ac1b6a2414d48ce18

  i386 architecture (x86 compatible Intel/AMD)

    http://security.ubuntu.com/ubuntu/pool/main/a/aide/aide_0.10-3ubuntu0.1_i386.deb
      Size/MD5:   398942 07096e82a51ee10ce965571e08342952

  powerpc architecture (Apple Macintosh G3/G4/G5)

    http://security.ubuntu.com/ubuntu/pool/main/a/aide/aide_0.10-3ubuntu0.1_powerpc.deb
      Size/MD5:   430230 77d787a8f00bf5058b21010a2c52acfa

Updated packages for Ubuntu 5.04:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/a/aide/aide_0.10-4ubuntu0.1.diff.gz
      Size/MD5:    29359 366869464761485ef3d29915ae294ab1
    http://security.ubuntu.com/ubuntu/pool/main/a/aide/aide_0.10-4ubuntu0.1.dsc
      Size/MD5:      703 28126aa389a49cc5354e6c704237b334
    http://security.ubuntu.com/ubuntu/pool/main/a/aide/aide_0.10.orig.tar.gz
      Size/MD5:   234184 39eb7d21064cac7b409c45d038b86cd8

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

    http://security.ubuntu.com/ubuntu/pool/main/a/aide/aide_0.10-4ubuntu0.1_amd64.deb
      Size/MD5:   465630 63bc8c81c424d4bfb00c233a2e97695d

  i386 architecture (x86 compatible Intel/AMD)

    http://security.ubuntu.com/ubuntu/pool/main/a/aide/aide_0.10-4ubuntu0.1_i386.deb
      Size/MD5:   431590 109018a99a6588f7f48ee8be595bf2b6

  powerpc architecture (Apple Macintosh G3/G4/G5)

    http://security.ubuntu.com/ubuntu/pool/main/a/aide/aide_0.10-4ubuntu0.1_powerpc.deb
      Size/MD5:   471800 73571a01182d41ec0f5ce73cd5b8cdbc

Updated packages for Ubuntu 5.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/a/aide/aide_0.10-6.1ubuntu0.1.diff.gz
      Size/MD5:    36588 1428d11ede7d4d4996b9f6d719aa9557
    http://security.ubuntu.com/ubuntu/pool/main/a/aide/aide_0.10-6.1ubuntu0.1.dsc
      Size/MD5:      763 715edd426517405c0f81feff1e7511c7
    http://security.ubuntu.com/ubuntu/pool/main/a/aide/aide_0.10.orig.tar.gz
      Size/MD5:   234184 39eb7d21064cac7b409c45d038b86cd8

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

    http://security.ubuntu.com/ubuntu/pool/main/a/aide/aide_0.10-6.1ubuntu0.1_amd64.deb
      Size/MD5:   513230 9a1477b093630a538262a137d7c37730

  i386 architecture (x86 compatible Intel/AMD)

    http://security.ubuntu.com/ubuntu/pool/main/a/aide/aide_0.10-6.1ubuntu0.1_i386.deb
      Size/MD5:   451422 41c84d68e6e4e69fe919109e00576051

  powerpc architecture (Apple Macintosh G3/G4/G5)

    http://security.ubuntu.com/ubuntu/pool/main/a/aide/aide_0.10-6.1ubuntu0.1_powerpc.deb
      Size/MD5:   581134 df0712d4d04b4854243c01f7696eb0c5
    

- 漏洞信息 (F39818)

Debian Linux Security Advisory 797-1 (PacketStormID:F39818)
2005-09-05 00:00:00
Debian  debian.org
advisory,local
linux,debian
CVE-2005-1849,CVE-2005-2096
[点击下载]

Debian Security Advisory DSA 797-1 - zsync, a file transfer program, includes a modified local copy of the zlib library, and is vulnerable to certain bugs fixed previously in the zlib package.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Debian Security Advisory DSA 797-1                     security@debian.org
http://www.debian.org/security/                              Michael Stone
September 1st, 2005                     http://www.debian.org/security/faq
- --------------------------------------------------------------------------

Package        : zsync
Vulnerability  : DOS
Problem-Type   : buffer overflow
Debian-specific: no
CVE ID         : CAN-2005-1849, CAN-2005-2096

zsync, a file transfer program, includes a modified local copy of
the zlib library, and is vulnerable to certain bugs fixed previously
in the zlib package.

The old stable distribution (woody) does not contain the zsync
package.

For the stable distribution (sarge) this problem has been fixed in
version 0.3.3-1.sarge.1.

For the unstable distribution (sid) this problem has been fixed in
version 0.4.0-2.

We recommend that you upgrade your zsync package.


Upgrade Instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.1 alias sarge
- --------------------------------

  Source archives:

    http://security.debian.org/pool/updates/main/z/zsync/zsync_0.3.3-1.sarge.1.dsc
      Size/MD5 checksum:      742 38abbfacbf93f57692641a0f257abe4e
    http://security.debian.org/pool/updates/main/z/zsync/zsync_0.3.3-1.sarge.1.diff.gz
      Size/MD5 checksum:     6213 224eae057a1eebdd3ffe16e6e3d584e6
    http://security.debian.org/pool/updates/main/z/zsync/zsync_0.3.3.orig.tar.gz
      Size/MD5 checksum:   241726 71efef80525276990cf8af97ee2b8f97

  Alpha architecture:

    http://security.debian.org/pool/updates/main/z/zsync/zsync_0.3.3-1.sarge.1_alpha.deb
      Size/MD5 checksum:   120612 0efd2b252f7a2eebac03d04aee7bff87

  AMD64 architecture:

    http://security.debian.org/pool/updates/main/z/zsync/zsync_0.3.3-1.sarge.1_amd64.deb
      Size/MD5 checksum:    99560 ede8508b5d555b6be89c5adbbea49c20

  ARM architecture:

    http://security.debian.org/pool/updates/main/z/zsync/zsync_0.3.3-1.sarge.1_arm.deb
      Size/MD5 checksum:   100420 713b7d689f4ccdf4317c255dd0de7e6f

  Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/z/zsync/zsync_0.3.3-1.sarge.1_i386.deb
      Size/MD5 checksum:    98414 bb4ff605c6e3b94f23dd0986ca55e450

  Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/z/zsync/zsync_0.3.3-1.sarge.1_ia64.deb
      Size/MD5 checksum:   139370 91cef962076eb5d66ddda86e1ca1e8f8

  HP Precision architecture:

    http://security.debian.org/pool/updates/main/z/zsync/zsync_0.3.3-1.sarge.1_hppa.deb
      Size/MD5 checksum:   105062 ba01f3b644ea1be05e51d3d07b00d363

  Motorola 680x0 architecture:

    http://security.debian.org/pool/updates/main/z/zsync/zsync_0.3.3-1.sarge.1_m68k.deb
      Size/MD5 checksum:    85176 ec83816290778ca23005cbcf001962ed

  Big endian MIPS architecture:

    http://security.debian.org/pool/updates/main/z/zsync/zsync_0.3.3-1.sarge.1_mips.deb
      Size/MD5 checksum:   106840 bdd9b5d16ed84330292a97eb01deb381

  Little endian MIPS architecture:

    http://security.debian.org/pool/updates/main/z/zsync/zsync_0.3.3-1.sarge.1_mipsel.deb
      Size/MD5 checksum:   107912 bf7c5dfcac00e250efefe59959f47deb

  PowerPC architecture:

    http://security.debian.org/pool/updates/main/z/zsync/zsync_0.3.3-1.sarge.1_powerpc.deb
      Size/MD5 checksum:   100460 7126e64533e31ccd1be3302772ca4158

  IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/z/zsync/zsync_0.3.3-1.sarge.1_s390.deb
      Size/MD5 checksum:   103472 b9712abdbaa529ab5ed20854b5b70406

  Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/z/zsync/zsync_0.3.3-1.sarge.1_sparc.deb
      Size/MD5 checksum:    98614 534233dd79188ea592f23a0b00f5d524


  These files will probably be moved into the stable distribution on
  its next update.

- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iQCVAwUBQxevaA0hVr09l8FJAQJekwQA1priiEMejHgPhx/OWzDPvL/KhkPypvz0
a7ekol446/PVCQlAdhAyv6kAV+Vrdh28f08RFSMa/9CS3Jt60M5Gh4toVuM5zjbG
HUH6OYB1l2nvBg73ulBzW5+CBue1XNF9JbXoB54PbkIwFydUC+Vg7czt8qEx3gnV
bmAMQNEQauw=
=2zlR
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
    

- 漏洞信息 (F39035)

Gentoo Linux Security Advisory 200508-1 (PacketStormID:F39035)
2005-08-05 00:00:00
Gentoo  security.gentoo.org
advisory,overflow,local
linux,gentoo
CVE-2005-1849,CVE-2005-2096
[点击下载]

Gentoo Linux Security Advisory GLSA 200508-01 - Compress::Zlib 1.34 contains a local vulnerable version of zlib, which may lead to a buffer overflow. Versions less than 1.35 are affected.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory                           GLSA 200508-01
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                                            http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

  Severity: High
     Title: Compress::Zlib: Buffer overflow
      Date: August 01, 2005
      Bugs: #100540
        ID: 200508-01

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

Compress::Zlib is vulnerable to a buffer overflow which could
potentially lead to execution of arbitrary code.

Background
==========

The Compress::Zlib is a Perl module which provides an interface to the
zlib compression library.

Affected packages
=================

    -------------------------------------------------------------------
     Package                 /  Vulnerable  /               Unaffected
    -------------------------------------------------------------------
  1  dev-perl/Compress-Zlib       < 1.35                       >= 1.35

Description
===========

Compress::Zlib 1.34 contains a local vulnerable version of zlib, which
may lead to a buffer overflow.

Impact
======

By creating a specially crafted compressed data stream, attackers can
overwrite data structures for applications that use Compress::Zlib,
resulting in a Denial of Service and potentially arbitrary code
execution.

Workaround
==========

There is no known workaround at this time.

Resolution
==========

All Compress::Zlib users should upgrade to the latest version:

    # emerge --sync
    # emerge --ask --oneshot --verbose ">=dev-perl/Compress-Zlib-1.35"

References
==========

  [ 1 ] GLSA 200507-19
        http://www.gentoo.org/security/en/glsa/glsa-200507-19.xml
  [ 2 ] GLSA 200507-05
        http://www.gentoo.org/security/en/glsa/glsa-200507-05.xml
  [ 3 ] CAN-2005-1849
        http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1849
  [ 4 ] CAN-2005-2096
        http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2096

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

  http://security.gentoo.org/glsa/glsa-200508-01.xml

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.

License
=======

Copyright 2005 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/2.0
    

- 漏洞信息 (F39022)

Gentoo Linux Security Advisory 200507-28 (PacketStormID:F39022)
2005-08-05 00:00:00
Gentoo  security.gentoo.org
advisory,overflow,x86
linux,gentoo
CVE-2005-1849,CVE-2005-2096
[点击下载]

Gentoo Linux Security Advisory GLSA 200507-28 - Earlier versions of emul-linux-x86-baselibs contain a vulnerable version of zlib, which may lead to a buffer overflow. Versions less than 2.2 are affected.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory                           GLSA 200507-28
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                                            http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

  Severity: High
     Title: AMD64 x86 emulation base libraries: Buffer overflow
      Date: July 30, 2005
      Bugs: #100686
        ID: 200507-28

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

The x86 emulation base libraries for AMD64 contain a vulnerable version
of zlib which could potentially lead to execution of arbitrary code.

Background
==========

The x86 emulation base libraries for AMD64 emulate the x86 (32-bit)
architecture on the AMD64 (64-bit) architecture.

Affected packages
=================

    -------------------------------------------------------------------
     Package                  /  Vulnerable  /              Unaffected
    -------------------------------------------------------------------
  1  emul-linux-x86-baselibs        < 2.2                       >= 2.2
    -------------------------------------------------------------------
     # Package 1 only applies to AMD64 users.

Description
===========

Earlier versions of emul-linux-x86-baselibs contain a vulnerable
version of zlib, which may lead to a buffer overflow.

Impact
======

By creating a specially crafted compressed data stream, attackers can
overwrite data structures for applications that use the x86 emulation
base libraries for AMD64, resulting in a Denial of Service and
potentially arbitrary code execution.

Workaround
==========

There is no known workaround at this time.

Resolution
==========

All AMD64 x86 emulation base libraries users should upgrade to the
latest version:

    # emerge --sync
    # emerge --ask --oneshot --verbose
">=app-emulation/emul-linux-x86-baselibs-2.2"

References
==========

  [ 1 ] GLSA 200507-05
        http://www.gentoo.org/security/en/glsa/glsa-200507-05.xml
  [ 2 ] GLSA 200507-19
        http://www.gentoo.org/security/en/glsa/glsa-200507-19.xml
  [ 3 ] CAN-2005-1849
        http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1849
  [ 4 ] CAN-2005-2096
        http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2096

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

  http://security.gentoo.org/glsa/glsa-200507-28.xml

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.

License
=======

Copyright 2005 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/2.0

    

- 漏洞信息 (F38927)

FreeBSD-SA-05-18.zlib.txt (PacketStormID:F38927)
2005-07-28 00:00:00
 
advisory,denial of service
freebsd
CVE-2005-1849
[点击下载]

FreeBSD Security Advisory FreeBSD-SA-05:18.zlib - A carefully constructed compressed data stream can result in zlib overwriting some data structures. This may cause applications to halt, resulting in a denial of service; or it may result in an attacker gaining elevated privileges.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

=============================================================================
FreeBSD-SA-05:18.zlib                                       Security Advisory
                                                          The FreeBSD Project

Topic:          Buffer overflow in zlib

Category:       core
Module:         libz
Announced:      2005-07-27
Credits:        Markus Oberhumer
Affects:        FreeBSD 5.3, FreeBSD 5.4
Corrected:      2005-07-27 08:41:44 UTC (RELENG_6, 6.0-BETA2)
                2005-07-27 08:41:56 UTC (RELENG_5, 5.4-STABLE)
                2005-07-27 08:42:16 UTC (RELENG_5_4, 5.4-RELEASE-p6)
                2005-07-27 08:42:38 UTC (RELENG_5_3, 5.3-RELEASE-p20)
CVE Name:       CAN-2005-1849

For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit
<URL:http://www.freebsd.org/security/>.

NOTE WELL: The issue discussed in this advisory is distinct from the
issue discussed in the earlier advisory FreeBSD-SA-05:16.zlib, although
the impact is very similar.

I.   Background

zlib is a compression library used by numerous applications to provide
data compression/decompression routines.

II.  Problem Description

A fixed-size buffer is used in the decompression of data streams.  Due
to erronous analysis performed when zlib was written, this buffer,
which was belived to be sufficiently large to handle any possible input
stream, is in fact too small.

III. Impact

A carefully constructed compressed data stream can result in zlib
overwriting some data structures.  This may cause applications to halt,
resulting in a denial of service; or it may result in an attacker
gaining elevated privileges.

IV.  Workaround

No workaround is available.

V.   Solution

Perform one of the following:

1) Upgrade your vulnerable system to 5-STABLE, or to the RELENG_5_4 or
RELENG_5_3 security branch dated after the correction date.

2) To patch your present system:

The following patches have been verified to apply to FreeBSD 5.3, and 5.4
systems.

a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.

# fetch ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-05:18/zlib.patch
# fetch ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-05:18/zlib.patch.asc

b) Execute the following commands as root:

# cd /usr/src
# patch < /path/to/patch
# cd /usr/src/lib/libz/
# make obj && make depend && make && make install

VI.  Correction details

The following list contains the revision numbers of each file that was
corrected in FreeBSD.

Branch                                                           Revision
  Path
- -------------------------------------------------------------------------
RELENG_5
  src/lib/libz/inftrees.h                                     1.1.1.5.2.1
RELENG_5_4
  src/UPDATING                                            1.342.2.24.2.15
  src/sys/conf/newvers.sh                                  1.62.2.18.2.11
  src/lib/libz/inftrees.h                                     1.1.1.5.6.1
RELENG_5_3
  src/UPDATING                                            1.342.2.13.2.23
  src/sys/conf/newvers.sh                                  1.62.2.15.2.25
  src/lib/libz/inftrees.h                                     1.1.1.5.4.1
RELENG_6
  src/lib/libz/inftrees.h                                     1.1.1.5.8.1
- -------------------------------------------------------------------------

VII. References

http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1849

The latest revision of this advisory is available at
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:18.zlib.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (FreeBSD)

iD4DBQFC50oLFdaIBMps37IRAg/1AJjTCluaNxJuBbSalLtgF34iey8DAJ9BGJmr
9NNdJfcjbm4qucvUYdsOqA==
=XDop
-----END PGP SIGNATURE-----
    

- 漏洞信息 (F38839)

Gentoo Linux Security Advisory 200507-19 (PacketStormID:F38839)
2005-07-22 00:00:00
Gentoo  security.gentoo.org
advisory,overflow
linux,gentoo
CVE-2005-1849
[点击下载]

Gentoo Linux Security Advisory GLSA 200507-19 - zlib improperly handles invalid data streams which could lead to a buffer overflow. Versions less than 1.2.3 are affected.

--nextPart1626894.Zuzb0Xa3bL
Content-Type: text/plain;
  charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory                           GLSA 200507-19
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                                            http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

  Severity: High
     Title: zlib: Buffer overflow
      Date: July 22, 2005
      Bugs: #99751
        ID: 200507-19

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

zlib is vulnerable to a buffer overflow which could potentially lead to
execution of arbitrary code.

Background
==========

zlib is a widely used free and patent unencumbered data compression
library.

Affected packages
=================

    -------------------------------------------------------------------
     Package        /  Vulnerable  /                        Unaffected
    -------------------------------------------------------------------
  1  sys-libs/zlib       < 1.2.3                              >= 1.2.3

Description
===========

zlib improperly handles invalid data streams which could lead to a
buffer overflow.

Impact
======

By creating a specially crafted compressed data stream, attackers can
overwrite data structures for applications that use zlib, resulting in
arbitrary code execution or a Denial of Service.

Workaround
==========

There is no known workaround at this time.

Resolution
==========

All zlib users should upgrade to the latest version:

    # emerge --sync
    # emerge --ask --oneshot --verbose ">=sys-libs/zlib-1.2.3"

References
==========

  [ 1 ] Full Disclosure Announcement
        http://archives.neohapsis.com/archives/fulldisclosure/2005-07/0489.html
  [ 2 ] CAN-2005-1849
        http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1849

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

  http://security.gentoo.org/glsa/glsa-200507-19.xml

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.

License
=======

Copyright 2005 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/2.0

--nextPart1626894.Zuzb0Xa3bL
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQBC4IUJzKC5hMHO6rkRAkVHAJ0aDF7ogLoGgEG7NlL6vRJbkLllHQCfZcxi
5E4nsenJKlDSSe9RmgDGEEs=
=jkyZ
-----END PGP SIGNATURE-----

--nextPart1626894.Zuzb0Xa3bL--
    

- 漏洞信息 (F38808)

Debian Linux Security Advisory 763-1 (PacketStormID:F38808)
2005-07-21 00:00:00
Debian  security.debian.org
advisory
linux,debian
CVE-2005-1849
[点击下载]

Debian Security Advisory DSA 763-1 - Markus Oberhumer discovered a flaw in the way zlib, a library used for file compression and decompression, handles invalid input. This flaw can cause programs which use zlib to crash when opening an invalid file.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
Debian Security Advisory DSA 763-1                   security@debian.org
http://www.debian.org/security/                            Michael Stone
July 20, 2005                         http://www.debian.org/security/faq
- ------------------------------------------------------------------------

Package        : zlib
Vulnerability  : buffer overflow
Problem type   : remote DoS
Debian-specific: no
CVE ID         : CAN-2005-1849

Markus Oberhumer discovered a flaw in the way zlib, a library used for
file compression and decompression, handles invalid input. This flaw can
cause programs which use zlib to crash when opening an invalid file.

This problem does not affect the old stable distribution (woody).

For the current stable distribution (sarge), this problem has been fixed
in version 1.2.2-4.sarge.2.

For the unstable distribution (sid), this problem has been fixed in
version 1.2.3-1. 

We recommend that you upgrade your zlib package.

Upgrade instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian 3.1 (stable)
- -------------------

  Stable was released for alpha, arm, hppa, i386, ia64, m68k, mips, mipsel, powerpc, s390 and sparc.

  Source archives:

    http://security.debian.org/pool/updates/main/z/zlib/zlib_1.2.2.orig.tar.gz
      Size/MD5 checksum:   430700 d43dabe3d374e299f2631c5fc5ce31f5
    http://security.debian.org/pool/updates/main/z/zlib/zlib_1.2.2-4.sarge.2.dsc
      Size/MD5 checksum:      807 e3fa0febf789e5c758d43476199825fd
    http://security.debian.org/pool/updates/main/z/zlib/zlib_1.2.2-4.sarge.2.diff.gz
      Size/MD5 checksum:    14718 e733bcc48ade3c675bc62a2554e2a453

  alpha architecture (DEC Alpha)

    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-dev_1.2.2-4.sarge.2_alpha.deb
      Size/MD5 checksum:   533980 950f2426191fd20fa1a0a1d975c5285d
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-udeb_1.2.2-4.sarge.2_alpha.udeb
      Size/MD5 checksum:    57220 1d97d651c5fb317b435ca4b4e03df7f0
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g_1.2.2-4.sarge.2_alpha.deb
      Size/MD5 checksum:    82078 804c8d3a9b53373fa8693ea4b5db059e
    http://security.debian.org/pool/updates/main/z/zlib/zlib-bin_1.2.2-4.sarge.2_alpha.deb
      Size/MD5 checksum:    30566 128b7f15f363185d05471bdd99fd4039

  arm architecture (ARM)

    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-udeb_1.2.2-4.sarge.2_arm.udeb
      Size/MD5 checksum:    42196 cec7d515976e1269116df86d58976ef1
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-dev_1.2.2-4.sarge.2_arm.deb
      Size/MD5 checksum:   498234 80358e0e95f2be93600919065d31515c
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g_1.2.2-4.sarge.2_arm.deb
      Size/MD5 checksum:    66728 0f055650a3092f0782bd00e10c78a64d
    http://security.debian.org/pool/updates/main/z/zlib/zlib-bin_1.2.2-4.sarge.2_arm.deb
      Size/MD5 checksum:    25286 6a7931194287cc37f44f3a050ca1e945

  hppa architecture (HP PA RISC)

    http://security.debian.org/pool/updates/main/z/zlib/zlib1g_1.2.2-4.sarge.2_hppa.deb
      Size/MD5 checksum:    70420 cb03981137f73dd2fb9a2a2cc40f2d18
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-udeb_1.2.2-4.sarge.2_hppa.udeb
      Size/MD5 checksum:    45430 7344c8007baae367ba7c8c4c72cfda68
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-dev_1.2.2-4.sarge.2_hppa.deb
      Size/MD5 checksum:   512584 920721beba8dd6edc1c476b83bba74a0
    http://security.debian.org/pool/updates/main/z/zlib/zlib-bin_1.2.2-4.sarge.2_hppa.deb
      Size/MD5 checksum:    29308 bd0d18dbaf6e9edaabcbce52528cc195

  i386 architecture (Intel ia32)

    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-udeb_1.2.2-4.sarge.2_i386.udeb
      Size/MD5 checksum:    38402 764ca5f9b9f9fa58c776678225ea8a4b
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g_1.2.2-4.sarge.2_i386.deb
      Size/MD5 checksum:    63080 f1d25909fcc26fb653ff92083e3c6b1c
    http://security.debian.org/pool/updates/main/z/zlib/zlib-bin_1.2.2-4.sarge.2_i386.deb
      Size/MD5 checksum:    25780 857be9a5220d54c222ded9c4faff6a22
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-dev_1.2.2-4.sarge.2_i386.deb
      Size/MD5 checksum:   488024 dd74347cf85d778238ada4e5b42f8642

  ia64 architecture (Intel ia64)

    http://security.debian.org/pool/updates/main/z/zlib/zlib1g_1.2.2-4.sarge.2_ia64.deb
      Size/MD5 checksum:    93462 6ed01ecbd1f214aa7fee259285944ea7
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-dev_1.2.2-4.sarge.2_ia64.deb
      Size/MD5 checksum:   553666 a54eb90a0ac7ffef0460aed3d7f558c7
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-udeb_1.2.2-4.sarge.2_ia64.udeb
      Size/MD5 checksum:    68610 56f859f0d990f5b9869dc999c3d0230d
    http://security.debian.org/pool/updates/main/z/zlib/zlib-bin_1.2.2-4.sarge.2_ia64.deb
      Size/MD5 checksum:    39258 7f0813ae8c8c9208d7ff68139c984f08

  m68k architecture (Motorola Mc680x0)

    http://security.debian.org/pool/updates/main/z/zlib/zlib-bin_1.2.2-4.sarge.2_m68k.deb
      Size/MD5 checksum:    24078 8e79779625dd37e03839668cf9946fc4
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-udeb_1.2.2-4.sarge.2_m68k.udeb
      Size/MD5 checksum:    34184 e7e987a0190218c343005f0e08ab130d
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g_1.2.2-4.sarge.2_m68k.deb
      Size/MD5 checksum:    58884 c453ee8596ab35f83913a1a5652c6a7f
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-dev_1.2.2-4.sarge.2_m68k.deb
      Size/MD5 checksum:   486102 29f51d071a8d50feb22ea66351039521

  mips architecture (MIPS (Big Endian))

    http://security.debian.org/pool/updates/main/z/zlib/zlib1g_1.2.2-4.sarge.2_mips.deb
      Size/MD5 checksum:    68822 bf7815238c0cb6f79f0296d89b2fe9a8
    http://security.debian.org/pool/updates/main/z/zlib/zlib-bin_1.2.2-4.sarge.2_mips.deb
      Size/MD5 checksum:    31564 3ad12bca5cbd9e9818f5bc592813e149
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-udeb_1.2.2-4.sarge.2_mips.udeb
      Size/MD5 checksum:    44064 3dd3202a819d9f0cceda522e22c72d0a
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-dev_1.2.2-4.sarge.2_mips.deb
      Size/MD5 checksum:   510282 8c2496dd52057a439d363b113245ad6e

  mipsel architecture (MIPS (Little Endian))

    http://security.debian.org/pool/updates/main/z/zlib/zlib1g_1.2.2-4.sarge.2_mipsel.deb
      Size/MD5 checksum:    69152 9e2754cc95ad0981969a683317e098cb
    http://security.debian.org/pool/updates/main/z/zlib/zlib-bin_1.2.2-4.sarge.2_mipsel.deb
      Size/MD5 checksum:    31538 7b2548f4afb248be93d4dfbb3e76ff93
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-dev_1.2.2-4.sarge.2_mipsel.deb
      Size/MD5 checksum:   509596 630a54c28569edbb2137831993d58e9e
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-udeb_1.2.2-4.sarge.2_mipsel.udeb
      Size/MD5 checksum:    44320 3f8f84d2c70973d46af65ef9a4a0cc07

  powerpc architecture (PowerPC)

    http://security.debian.org/pool/updates/main/z/zlib/zlib-bin_1.2.2-4.sarge.2_powerpc.deb
      Size/MD5 checksum:    30008 543bcd8e27d7899d2df07dd2ba9fabf6
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g_1.2.2-4.sarge.2_powerpc.deb
      Size/MD5 checksum:    69670 9bc554e8b2783e93c80c7545b267dac0
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-dev_1.2.2-4.sarge.2_powerpc.deb
      Size/MD5 checksum:   522700 14660718b619efe6022e70be92cfb297
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-udeb_1.2.2-4.sarge.2_powerpc.udeb
      Size/MD5 checksum:    44796 a4469df0bfa2c207a5670cf72d6618a8

  s390 architecture (IBM S/390)

    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-udeb_1.2.2-4.sarge.2_s390.udeb
      Size/MD5 checksum:    42554 8e3b601e51c37543f487e7bfdbdd0fae
    http://security.debian.org/pool/updates/main/z/zlib/zlib-bin_1.2.2-4.sarge.2_s390.deb
      Size/MD5 checksum:    27226 edd658b54958ac949e03b18a16c16701
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g_1.2.2-4.sarge.2_s390.deb
      Size/MD5 checksum:    67080 1573e6dac04a89f6112bb49841f67907
    http://security.debian.org/pool/updates/main/z/zlib/lib64z1_1.2.2-4.sarge.2_s390.deb
      Size/MD5 checksum:    52628 16afd72e2349e5d142cf6f4650a93478
    http://security.debian.org/pool/updates/main/z/zlib/lib64z1-dev_1.2.2-4.sarge.2_s390.deb
      Size/MD5 checksum:    55560 f06d56fab2f10b1b66924d6c3797a51b
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-dev_1.2.2-4.sarge.2_s390.deb
      Size/MD5 checksum:   539004 e503ff8b0920cf33003f269cde722575

  sparc architecture (Sun SPARC/UltraSPARC)

    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-dev_1.2.2-4.sarge.2_sparc.deb
      Size/MD5 checksum:   498926 0417611b01583d97ae0e51538094f231
    http://security.debian.org/pool/updates/main/z/zlib/lib64z1-dev_1.2.2-4.sarge.2_sparc.deb
      Size/MD5 checksum:    57366 ce0e121289f3a11869bd11d74794c784
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g-udeb_1.2.2-4.sarge.2_sparc.udeb
      Size/MD5 checksum:    42394 cef807ffdbab860caf36f46fd0e35e1a
    http://security.debian.org/pool/updates/main/z/zlib/zlib1g_1.2.2-4.sarge.2_sparc.deb
      Size/MD5 checksum:    66898 e02dc0d42b21a600f3fc771095372e64
    http://security.debian.org/pool/updates/main/z/zlib/lib64z1_1.2.2-4.sarge.2_sparc.deb
      Size/MD5 checksum:    54566 d5bc984dbbffe1b49119c66f4f23073e
    http://security.debian.org/pool/updates/main/z/zlib/zlib-bin_1.2.2-4.sarge.2_sparc.deb
      Size/MD5 checksum:    25810 507c188be5a90ed4d97ba6a7f92daf60

- -------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iQCVAwUBQt8CTA0hVr09l8FJAQK+OwP+Lpeo+gzV00uKJxFkpJ2MF/GdL4SGB1z2
44au7NooESKIBvZvyHgRyI6MYSJhu4+1+Bd0cgsmBaAAUWHFPng1wRO/yAggaQgC
tIfjjgVEpliVCOAnV/7M2pifq7G/y4sgrp66vjDd6gzDUsqnTpedaryf/XYBQGKZ
e3TpqikSiQo=
=56rx
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
    

- 漏洞信息

18141
zlib inftrees.c Invalid File Overflow Local DoS
Denial of Service, Input Manipulation
Loss of Integrity, Loss of Availability
Vendor Verified

- 漏洞描述

zlib contains an overflow condition in nftrees.c. The issue is triggered as user-supplied input is not properly validated during the handling of invalid files, which will cause a buffer overflow. This may allow a remote attacker to potentially execute arbitrary code or cause a denial of service.

- 时间线

2005-07-21 Unknow
Unknow Unknow

- 解决方案

It has been reported that this issue has been fixed. Upgrade to version 1.2.3, or higher, to address this vulnerability.

- 相关参考

- 漏洞作者

Unknown or Incomplete

- 漏洞信息

Zlib Compression Library Decompression Buffer Overflow Vulnerability
Boundary Condition Error 14340
Yes No
2005-07-21 12:00:00 2009-10-16 04:18:00
Markus Oberhumer is credited with the discovery of this issue.

- 受影响的程序版本

zlib zlib 1.2.2
+ zsync zsync 0.4
+ zsync zsync 0.3.3
+ zsync zsync 0.3.2
+ zsync zsync 0.3.1
+ zsync zsync 0.3
+ zsync zsync 0.2.3
+ zsync zsync 0.2.2
+ zsync zsync 0.2.1
+ zsync zsync 0.2
+ zsync zsync 0.1.6
+ zsync zsync 0.1.5
+ zsync zsync 0.1.4
+ zsync zsync 0.1.3
+ zsync zsync 0.1.2
+ zsync zsync 0.1.1
+ zsync zsync 0.1
+ zsync zsync 0.0.6
+ zsync zsync 0.0.5
+ zsync zsync 0.0.4
+ zsync zsync 0.0.3
+ zsync zsync 0.0.2
+ zsync zsync 0.0.1
zlib zlib 1.2.1
+ Conectiva Linux 10.0
+ Red Hat Fedora Core2
+ Turbolinux Turbolinux Server 10.0
zlib zlib 1.2 .0.7
+ Red Hat Fedora Core1
zlib zlib 1.1.4
+ Caldera OpenLinux Server 3.1.1
+ Caldera OpenLinux Server 3.1
+ Caldera OpenLinux Workstation 3.1.1
+ Caldera OpenLinux Workstation 3.1
+ GLT GLT 0.6
+ NetBSD NetBSD 1.6
+ NetBSD NetBSD 1.5.3
+ NetBSD NetBSD 1.5.2
+ NetBSD NetBSD 1.5.1
+ NetBSD NetBSD 1.5
- NullSoft Winamp 2.79
+ OpenPKG OpenPKG 1.2
+ OpenPKG OpenPKG 1.1
+ Red Hat Enterprise Linux AS 2.1 IA64
+ Red Hat Enterprise Linux AS 2.1
+ RedHat Enterprise Linux ES 2.1 IA64
+ RedHat Enterprise Linux ES 2.1
+ RedHat Enterprise Linux WS 2.1 IA64
+ RedHat Enterprise Linux WS 2.1
+ RedHat Linux Advanced Work Station 2.1
+ Sun Cobalt Qube 3
+ Sun Cobalt Qube3 4000WG
+ Sun Cobalt Qube3 Japanese 4000WGJ
+ Sun Cobalt Qube3 Japanese w/ Caching and RAID 4100WGJ
+ Sun Cobalt Qube3 Japanese w/Caching 4010WGJ
+ Sun Cobalt Qube3 w/ Caching and RAID 4100WG
+ Sun Cobalt Qube3 w/Caching 4010WG
+ Sun Cobalt RaQ 4
+ Sun Cobalt RaQ XTR
+ Sun Cobalt RaQ XTR 3500R
+ Sun Cobalt RaQ XTR Japanese 3500R-ja
+ Sun Cobalt RaQ4 3001R
+ Sun Cobalt RaQ4 Japanese RAID 3100R-ja
+ Sun Cobalt RaQ4 RAID 3100R
+ Sun Linux 5.0
zlib zlib 1.1.3
zlib zlib 1.1.2
zlib zlib 1.1.1
zlib zlib 1.1
VMWare ESX Server 3.0.1
VMWare ESX Server 3.0
Ubuntu Ubuntu Linux 5.10 powerpc
Ubuntu Ubuntu Linux 5.10 i386
Ubuntu Ubuntu Linux 5.10 amd64
Ubuntu Ubuntu Linux 5.0 4 powerpc
Ubuntu Ubuntu Linux 5.0 4 i386
Ubuntu Ubuntu Linux 5.0 4 amd64
Ubuntu Ubuntu Linux 4.1 ppc
Ubuntu Ubuntu Linux 4.1 ia64
Ubuntu Ubuntu Linux 4.1 ia32
Turbolinux Turbolinux Server 10.0
Trustix Secure Linux 2.2
Trustix Secure Linux 2.1
Trustix Secure Enterprise Linux 2.0
Trolltech Qt 3.3.4
+ Gentoo Linux
Trolltech Qt 3.3.3
Trolltech Qt 3.3.2
Trolltech Qt 3.3.1
Trolltech Qt 3.3 .0
Trolltech Qt 3.2.3
+ Conectiva Linux 10.0
+ Mandriva Linux Mandrake 10.0 AMD64
+ Mandriva Linux Mandrake 10.0
Trolltech Qt 3.2.1
Trolltech Qt 3.1.2
+ Mandriva Linux Mandrake 9.2 amd64
+ Mandriva Linux Mandrake 9.2
Trolltech Qt 3.1.1
+ Conectiva Linux 9.0
Trolltech Qt 3.1
Trolltech Qt 3.0.5
Trolltech Qt 3.0.3
Trolltech Qt 3.0
Trolltech Qt 2.3.1
Slackware Linux 10.1
Slackware Linux 10.0
Slackware Linux -current
SCO Unixware 7.1.4
SCO Unixware 7.1.3
SCO Open Server 6.0
SCO Open Server 5.0.7
SCO Open Server 5.0.6 a
SCO Open Server 5.0.6
S.u.S.E. Open-Enterprise-Server 9.0
S.u.S.E. Novell Linux Desktop 9.0
S.u.S.E. Linux Professional 9.3 x86_64
S.u.S.E. Linux Professional 9.3
S.u.S.E. Linux Professional 9.2 x86_64
S.u.S.E. Linux Professional 9.2
S.u.S.E. Linux Professional 9.1 x86_64
S.u.S.E. Linux Professional 9.1
S.u.S.E. Linux Personal 9.3 x86_64
S.u.S.E. Linux Personal 9.3
S.u.S.E. Linux Personal 9.2 x86_64
S.u.S.E. Linux Personal 9.2
S.u.S.E. Linux Personal 9.1 x86_64
S.u.S.E. Linux Personal 9.1
S.u.S.E. Linux Enterprise Server for S/390 9.0
S.u.S.E. Linux Enterprise Server 9
RedHat Red Hat Network Satellite (for RHEL 4) 5.1
RedHat Enterprise Linux WS 4
RedHat Enterprise Linux ES 4
RedHat Desktop 4.0
Red Hat Red Hat Network Satellite Server 4.2
Red Hat Fedora Core4
Red Hat Fedora Core3
Red Hat Fedora Core2
Red Hat Fedora Core1
Red Hat Fedora 11
Red Hat Fedora 10
Red Hat Enterprise Linux AS 4
OpenPKG OpenPKG 2.4
OpenPKG OpenPKG 2.3
OpenPKG OpenPKG Current
OpenBSD OpenBSD 3.7
OpenBSD OpenBSD 3.6
OpenBSD OpenBSD 3.5
OpenBSD OpenBSD -current
Mandriva Linux Mandrake 2006.0 x86_64
Mandriva Linux Mandrake 2006.0
Mandriva Linux Mandrake 10.2 x86_64
Mandriva Linux Mandrake 10.2
Mandriva Linux Mandrake 10.1 x86_64
Mandriva Linux Mandrake 10.1
Mandriva Linux Mandrake 10.0 AMD64
Mandriva Linux Mandrake 10.0
MandrakeSoft Multi Network Firewall 2.0
MandrakeSoft Corporate Server 3.0 x86_64
MandrakeSoft Corporate Server 3.0
MandrakeSoft Corporate Server 2.1 x86_64
MandrakeSoft Corporate Server 2.1
Gentoo Linux
FreeBSD FreeBSD 5.4 -RELENG
FreeBSD FreeBSD 5.4 -RELEASE
FreeBSD FreeBSD 5.4 -PRERELEASE
FreeBSD FreeBSD 5.3 -STABLE
FreeBSD FreeBSD 5.3 -RELENG
FreeBSD FreeBSD 5.3 -RELEASE
FreeBSD FreeBSD 5.3
FileZilla FileZilla Server 0.9.8 c
FileZilla FileZilla Server 0.9.8 b
FileZilla FileZilla Server 0.9.8 a
FileZilla FileZilla Server 0.9.8
FileZilla FileZilla Server 0.7.1
FileZilla FileZilla Server 0.7
FileZilla FileZilla Server 0.9.6
FileZilla FileZilla Server 0.9.5
FileZilla FileZilla Server 0.9.4e
FileZilla FileZilla Server 0.9.4d
FileZilla FileZilla Server 0.9.3
FileZilla FileZilla Server 0.9.2
FileZilla FileZilla Server 0.9.1b
FileZilla FileZilla Server 0.9.0
FileZilla FileZilla Server 0.8.9
FileZilla FileZilla Server 0.8.8
FileZilla FileZilla Server 0.8.7
FileZilla FileZilla Server 0.8.6a
FileZilla FileZilla Server 0.8.5
FileZilla FileZilla Server 0.8.4
FileZilla FileZilla Server 0.8.3
FileZilla FileZilla Server 0.8.2
FileZilla FileZilla Server 0.8.1
Ethereal Group Ethereal 0.10.11
Ethereal Group Ethereal 0.10.9
Ethereal Group Ethereal 0.10.8
Ethereal Group Ethereal 0.10.7
Ethereal Group Ethereal 0.10.6
Ethereal Group Ethereal 0.10.5
Ethereal Group Ethereal 0.10.4
Ethereal Group Ethereal 0.10.3
+ Mandriva Linux Mandrake 10.0 AMD64
+ Mandriva Linux Mandrake 10.0
+ Red Hat Fedora Core2
+ Red Hat Fedora Core1
+ S.u.S.E. Linux Personal 9.2
+ S.u.S.E. Linux Personal 9.1
+ S.u.S.E. Linux Personal 9.0
Ethereal Group Ethereal 0.10.2
Ethereal Group Ethereal 0.10.1
Ethereal Group Ethereal 0.10 .10
+ Debian Linux 3.1 sparc
+ Debian Linux 3.1 s/390
+ Debian Linux 3.1 ppc
+ Debian Linux 3.1 mipsel
+ Debian Linux 3.1 mips
+ Debian Linux 3.1 m68k
+ Debian Linux 3.1 ia-64
+ Debian Linux 3.1 ia-32
+ Debian Linux 3.1 hppa
+ Debian Linux 3.1 arm
+ Debian Linux 3.1 amd64
+ Debian Linux 3.1 alpha
+ Debian Linux 3.1
+ Mandriva Linux Mandrake 10.2 x86_64
+ Mandriva Linux Mandrake 10.2
+ Mandriva Linux Mandrake 10.1 x86_64
+ Mandriva Linux Mandrake 10.1
Ethereal Group Ethereal 0.10
Debian Linux 3.1 sparc
Debian Linux 3.1 s/390
Debian Linux 3.1 ppc
Debian Linux 3.1 mipsel
Debian Linux 3.1 mips
Debian Linux 3.1 m68k
Debian Linux 3.1 ia-64
Debian Linux 3.1 ia-32
Debian Linux 3.1 hppa
Debian Linux 3.1 arm
Debian Linux 3.1 amd64
Debian Linux 3.1 alpha
Debian Linux 3.1
Debian Linux 3.0 sparc
Debian Linux 3.0 s/390
Debian Linux 3.0 ppc
Debian Linux 3.0 mipsel
Debian Linux 3.0 mips
Debian Linux 3.0 m68k
Debian Linux 3.0 ia-64
Debian Linux 3.0 ia-32
Debian Linux 3.0 hppa
Debian Linux 3.0 arm
Debian Linux 3.0 alpha
Debian Linux 3.0
Conectiva Linux 10.0
Apple Mac OS X Server 10.4.2
Apple Mac OS X 10.4.2
AIDE AIDE 0.10
+ Ubuntu Ubuntu Linux 5.10 powerpc
+ Ubuntu Ubuntu Linux 5.10 i386
+ Ubuntu Ubuntu Linux 5.10 amd64
+ Ubuntu Ubuntu Linux 5.0 4 powerpc
+ Ubuntu Ubuntu Linux 5.0 4 i386
+ Ubuntu Ubuntu Linux 5.0 4 amd64
+ Ubuntu Ubuntu Linux 4.1 ppc
+ Ubuntu Ubuntu Linux 4.1 ia64
+ Ubuntu Ubuntu Linux 4.1 ia32
zlib zlib 1.2.3
Trolltech Qt 3.3.5
FileZilla FileZilla Server 0.9.9
Ethereal Group Ethereal 0.10.12

- 不受影响的程序版本

zlib zlib 1.2.3
Trolltech Qt 3.3.5
FileZilla FileZilla Server 0.9.9
Ethereal Group Ethereal 0.10.12

- 漏洞讨论

Zlib is prone to a buffer-overflow vulnerability because it fails to properly handle unexpected input to its decompression routines.

Certain values used during decompression are incorrectly specified, allowing invalid inflate input to corrupt memory.

Exploiting this vulnerability allows attackers to crash applications that use the affected library and potentially execute arbitrary code in the context of an affected application.

- 漏洞利用

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: vuldb@securityfocus.com.

- 解决方案

Vendor updates are available. Please see the referenced advisories for details.


FileZilla FileZilla Server 0.9.5

FileZilla FileZilla Server 0.9.2

FileZilla FileZilla Server 0.8.3

FileZilla FileZilla Server 0.9.4d

FileZilla FileZilla Server 0.8.9

OpenPKG OpenPKG Current

FileZilla FileZilla Server 0.8.7

FileZilla FileZilla Server 0.8.5

Ethereal Group Ethereal 0.10 .10

AIDE AIDE 0.10

Ethereal Group Ethereal 0.10.11

Ethereal Group Ethereal 0.10.2

Ethereal Group Ethereal 0.10.3

Ethereal Group Ethereal 0.10.7

Ethereal Group Ethereal 0.10.8

FileZilla FileZilla Server 0.9.8 b

FileZilla FileZilla Server 0.9.8

zlib zlib 1.1

zlib zlib 1.1.2

zlib zlib 1.1.4

zlib zlib 1.2 .0.7

zlib zlib 1.2.1

zlib zlib 1.2.2

Mandriva Linux Mandrake 10.1 x86_64

Apple Mac OS X 10.4.2

MandrakeSoft Corporate Server 2.1

OpenPKG OpenPKG 2.3

Trolltech Qt 2.3.1

OpenPKG OpenPKG 2.4

MandrakeSoft Corporate Server 3.0

Trolltech Qt 3.0

Trolltech Qt 3.0.3

Trolltech Qt 3.1

Trolltech Qt 3.1.1

Trolltech Qt 3.1.2

Trolltech Qt 3.2.1

Trolltech Qt 3.2.3

Trolltech Qt 3.3 .0

Trolltech Qt 3.3.4

Ubuntu Ubuntu Linux 4.1 ia32

Ubuntu Ubuntu Linux 5.0 4 amd64

SCO Open Server 5.0.6

Ubuntu Ubuntu Linux 5.10 powerpc

- 相关参考

 

 

关于SCAP中文社区

SCAP中文社区是国内第一个以SCAP为主题的中文开放社区。了解更多信息,请查阅[关于本站]

版权声明

CVE/CWE/OVAL均为MITRE公司的注册商标,它们的官方数据源均保存在MITRE公司的相关网站