The following bug has been fixed :

  - Specially crafted gzip archives could trigger integer     overflows. Attackers could exploit that to crash gzip or     potentially execute arbitrary code. (CVE-2010-0001) Only     64bit architectures are affected by this flaw.

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2010-0061 advisory.

    [1.3.5-11.0.1.el5_4.1]
    - Updated description in specfile to be product neutral

    [1.3.5-11:.1]
    - Added fix for CVE-2010-0001: (64 bit) Integer underflow by decompressing       LZW format files       Resolves: rhbz#555088

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201412-08 (Multiple packages, Multiple vulnerabilities fixed in 2010)

    Vulnerabilities have been discovered in the packages listed below.
      Please review the CVE identifiers in the Reference section for details.
      Insight       Perl Tk Module       Source-Navigator       Tk       Partimage       Mlmmj       acl       Xinit       gzip       ncompress       liblzw       splashutils       GNU M4       KDE Display Manager       GTK+       KGet       dvipng       Beanstalk       Policy Mount       pam_krb5       GNU gv       LFTP       Uzbl       Slim       Bitdefender Console       iputils       DVBStreamer   Impact :

    A context-dependent attacker may be able to gain escalated privileges,       execute arbitrary code, cause Denial of Service, obtain sensitive       information, or otherwise bypass security restrictions.
  Workaround :

    There are no known workarounds at this time.

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.5.

Mac OS X 10.6.5 contains security fixes for the following products :

  - AFP Server
  - Apache mod_perl
  - Apache
  - AppKit
  - ATS
  - CFNetwork
  - CoreGraphics
  - CoreText
  - CUPS
  - Directory Services
  - diskdev_cmds
  - Disk Images
  - Flash Player plug-in
  - gzip
  - Image Capture
  - ImageIO
  - Image RAW
  - Kernel
  - MySQL
  - neon
  - Networking
  - OpenLDAP
  - OpenSSL
  - Password Server
  - PHP
  - Printing
  - python
  - QuickLook
  - QuickTime
  - Safari RSS
  - Time Machine
  - Wiki Server
  - X11
  - xar

This update fixes CVE-2009-2624 and CVE-2010-0001 vulnerabilities.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Aki Helin discovered an integer underflow in ncompress, the original Lempel-Ziv compress/uncompress programs. This could lead to the execution of arbitrary code when trying to decompress a crafted LZW compressed gzip archive.

The following bug has been fixed :

Specially crafted gzip archives could trigger integer overflows.
Attackers could exploit that to crash gzip or potentially execute arbitrary code (CVE-2010-0001). Only 64bit architectures are affected by this flaw.

An updated gzip package that fixes one security issue is now available for Red Hat Enterprise Linux 3, 4, and 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The gzip package provides the GNU gzip data compression program.

An integer underflow flaw, leading to an array index error, was found in the way gzip expanded archive files compressed with the Lempel-Ziv-Welch (LZW) compression algorithm. If a victim expanded a specially crafted archive, it could cause gzip to crash or, potentially, execute arbitrary code with the privileges of the user running gzip. This flaw only affects 64-bit systems. (CVE-2010-0001)

Red Hat would like to thank Aki Helin of the Oulu University Secure Programming Group for responsibly reporting this flaw.

Users of gzip should upgrade to this updated package, which contains a backported patch to correct this issue.

It was discovered that gzip incorrectly handled certain malformed compressed files. If a user or automated system were tricked into opening a specially crafted gzip file, an attacker could cause gzip to crash or possibly execute arbitrary code with the privileges of the user invoking the program. (CVE-2009-2624)

Aki Helin discovered that gzip incorrectly handled certain malformed files compressed with the Lempel-Ziv-Welch (LZW) algorithm. If a user or automated system were tricked into opening a specially crafted gzip file, an attacker could cause gzip to crash or possibly execute arbitrary code with the privileges of the user invoking the program.
(CVE-2010-0001).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Specially crafted gzip archives could lead to gzip allocating a too small huffman table. Attackers could exploit that to crash gzip (CVE-2009-2624).

Specially crafted gzip archives could trigger integer overflows.
Attackers could exploit that to crash gzip or potentially execute arbitrary code (CVE-2010-0001). Only 64bit architectures are affected by this flaw.

A vulnerability has been found and corrected in ncompress :

An integer underflow leading to array index error was found in the way gzip used to decompress files / archives, compressed with the Lempel-Ziv-Welch (LZW) compression algorithm. A remote attacker could provide a specially crafted LZW compressed gzip archive, which once decompressed by a local, unsuspecting user would lead to gzip crash, or, potentially to arbitrary code execution with the privileges of the user running gzip (CVE-2010-0001).

The updated packages have been upgraded to the 4.2.4.4 version which is not vulnerable to this issue.

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several components and third-party libraries :

  - libpng
  - VMnc Codec
  - vmrun
  - VMware Remote Console (VMrc)
  - VMware Tools
  - vmware-authd

ID	名稱	產品	系列	已發布	已更新	嚴重性
44304	SuSE9 Security Update : gzip (YOU Patch Number 12573)	Nessus	SuSE Local Security Checks	2010/1/26	2021/1/14	medium
67990	Oracle Linux 5 : gzip (ELSA-2010-0061)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	critical
79961	GLSA-201412-08 : Multiple packages, Multiple vulnerabilities fixed in 2010	Nessus	Gentoo Local Security Checks	2014/12/15	2021/1/6	critical
50548	Mac OS X 10.6.x < 10.6.5 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2010/11/10	2024/5/28	critical
47201	Fedora 12 : gzip-1.3.12-14.fc12 (2010-0884)	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	medium
47792	Debian DSA-2074-1 : ncompress - integer underflow	Nessus	Debian Local Security Checks	2010/7/22	2021/1/4	medium
49857	SuSE 10 Security Update : gzip (ZYPP Patch Number 6793)	Nessus	SuSE Local Security Checks	2010/10/11	2021/1/14	medium
44098	CentOS 3 / 4 / 5 : gzip (CESA-2010:0061)	Nessus	CentOS Local Security Checks	2010/1/21	2021/1/4	medium
44107	Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : gzip vulnerabilities (USN-889-1)	Nessus	Ubuntu Local Security Checks	2010/1/21	2019/9/19	medium
44306	openSUSE Security Update : gzip (gzip-1838)	Nessus	SuSE Local Security Checks	2010/1/26	2021/1/14	medium
44310	openSUSE Security Update : gzip (gzip-1838)	Nessus	SuSE Local Security Checks	2010/1/26	2021/1/14	medium
56530	Mandriva Linux Security Advisory : ncompress (MDVSA-2011:152)	Nessus	Mandriva Local Security Checks	2011/10/18	2021/1/6	medium
44308	openSUSE Security Update : gzip (gzip-1838)	Nessus	SuSE Local Security Checks	2010/1/26	2021/1/14	medium
89740	VMware ESX / ESXi Third-Party Libraries and Components (VMSA-2010-0009) (remote check)	Nessus	VMware ESX Local Security Checks	2016/3/8	2021/1/6	critical

偵測

搜尋 Plugin

medium

critical

critical

critical

medium

medium

medium

medium

medium

medium

medium

medium

medium

critical