Ludwig Nussel has discovered a buffer overflow vulnerability in unarj's handling of long filenames which could potentially lead to execution of arbitrary code with the permissions of the user running unarj.

An updated unarj package that fixes a buffer overflow vulnerability and a directory traversal vulnerability is now available.

The unarj program is an archiving utility which can extract ARJ-compatible archives.

A buffer overflow bug was discovered in unarj when handling long file names contained in an archive. An attacker could create a specially crafted archive which could cause unarj to crash or possibly execute arbitrary code when extracted by a victim. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0947 to this issue.

Additionally, a path traversal vulnerability was discovered in unarj.
An attacker could create a specially crafted archive which would create files in the parent ('..') directory when extracted by a victim. When used recursively, this vulnerability could be used to overwrite critical system files and programs. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-1027 to this issue.

Users of unarj should upgrade to this updated package which contains backported patches and is not vulnerable to these issues.

unarj に、アーカイブに含まれている長いファイル名を処理する際のバッファオーバーフローのバグが発見されました。攻撃者が特別に細工されたパスでアーカイブを作成し、これにより、unarj がクラッシュしたり、任意の命令が実行されたりする可能性があります。Common Vulnerabilities and Exposures プロジェクト（cve.mitre.org）は、この問題に CVE-2004-0947 の識別名を割り当てています。

また、パストラバーサルの脆弱性が unarj に存在し、これによって攻撃者が親（「..」）ディレクトリにファイルを抽出できます。
この脆弱性が再帰的に使用されると、重要なシステムファイルおよびプログラムが上書きされる可能性があります。

unarj の全ユーザーは、これらの更新済みパッケージへアップグレードすることが推奨されます。

注意：Tenable Network Security は、前述の記述ブロックを Fedora セキュリティアドバイザリから直接抽出しています。Tenable では、できる限り新たな問題を持ち込まないように、自動的に整理して書式設定するようにしています。

在 unarj 處理封存內含的長檔案名稱時，發現一個緩衝區溢位錯誤。攻擊者可使用特製的路徑建立封存，從而造成 unarj 損毀或執行任意指令。Common Vulnerabilities and Exposures 專案 (cve.mitre.org) 已將名稱 CVE-2004-0947 指派給此問題。

此外，unarj 還存在一個路徑遊走弱點，其允許攻擊者將檔案解壓縮至 parent ('..') 目錄。
以遞迴方式使用時，此弱點可遭利用來覆寫重要系統檔案和程式。

建議 unarj 使用者升級至這些套件。

請注意，Tenable Network Security 已直接從 Fedora 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

The remote host is affected by the vulnerability described in GLSA-200411-29 (unarj: Long filenames buffer overflow and a path traversal vulnerability)

    unarj has a bounds checking vulnerability within the handling of     long filenames in archives. It also fails to properly sanitize paths     when extracting an archive (if the 'x' option is used to preserve     paths).
  Impact :

    An attacker could trigger a buffer overflow or a path traversal by     enticing a user to open an archive containing specially crafted path     names, potentially resulting in the overwrite of files or execution of     arbitrary code with the permissions of the user running unarj.
  Workaround :

    There is no known workaround at this time.

A buffer overflow bug has been discovered in unarj when handling long file names contained in an archive. An attacker could create an archive with a specially crafted path which could cause unarj to crash or execute arbitrary instructions. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0947 to this issue.

Additionally, a path traversal vulnerability exists in unarj which allows an attacker to extract files to the parent ('..') directory.
When used recursively, this vulnerability can be used to overwrite critical system files and programs.

Users of unarj are advised to upgrade to these packages.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

处理存档中包含的长文件名时，在 unarj 中发现一个缓冲区溢出缺陷。攻击者可创建具有特别构建的路径的存档，从而造成 unarj 崩溃或执行任意指令。通用漏洞和暴露计划 (cve.mitre.org) 已为此问题分配名称 CVE-2004-0947。

此外，unarj 中存在一个路径遍历漏洞，允许攻击者将文件解压缩到父（“..”）目录。
递归使用时，此漏洞可用于覆盖重要系统文件和程序。

建议 unarj 用户升级到这些程序包。

请注意，Tenable Network Security 已直接从 Fedora 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

A directory traversal bug was spotted in the unarj program (CVE-2004-0947). Additionaly SUSE Security audited unarj and found several buffer overflows which are also fixed by this update.

Several vulnerabilities have been discovered in unarj, a non-free ARJ unarchive utility. The Common Vulnerabilities and Exposures Project identifies the following vulnerabilities :

  - CAN-2004-0947     A buffer overflow has been discovered when handling long     file names contained in an archive. An attacker could     create a specially crafted archive which could cause     unarj to crash or possibly execute arbitrary code when     being extracted by a victim.

  - CAN-2004-1027

    A directory traversal vulnerability has been found so     that an attacker could create a specially crafted     archive which would create files in the parent directory     when being extracted by a victim. When used recursively,     this vulnerability could be used to overwrite critical     system files and programs.

ID	名稱	產品	系列	已發布	已更新	嚴重性
19053	FreeBSD : unarj -- long filename buffer overflow (a163baff-3fe1-11d9-a9e7-0001020eed82)	Nessus	FreeBSD Local Security Checks	2005/7/13	2021/1/6	critical
16145	RHEL 2.1 : unarj (RHSA-2005:007)	Nessus	Red Hat Local Security Checks	2005/1/13	2021/1/14	critical
62247	Fedora Core 2：unarj-2.63a-7（2004-414）	Nessus	Fedora Local Security Checks	2012/9/24	2021/1/11	critical
62247	Fedora Core 2︰unarj-2.63a-7 (2004-414)	Nessus	Fedora Local Security Checks	2012/9/24	2021/1/11	critical
15777	GLSA-200411-29 : unarj: Long filenames buffer overflow and a path traversal vulnerability	Nessus	Gentoo Local Security Checks	2004/11/22	2021/1/6	critical
62247	Fedora Core 2 : unarj-2.63a-7 (2004-414)	Nessus	Fedora Local Security Checks	2012/9/24	2021/1/11	critical
62247	Fedora Core 2：unarj-2.63a-7 (2004-414)	Nessus	Fedora Local Security Checks	2012/9/24	2021/1/11	critical
41339	SuSE9 Security Update : unarj (YOU Patch Number 9523)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	critical
16236	Debian DSA-652-1 : unarj - several vulnerabilities	Nessus	Debian Local Security Checks	2005/1/25	2021/1/4	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical