RHSA-2005:007

csafUSredhat_csaf

Red Hat Security Advisory: unarj security update

view advisory published 2005-01-12

An updated unarj package that fixes a buffer overflow vulnerability and a directory traversal vulnerability is now available.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2004-1027USmedium5.0—
Directory traversal vulnerability in the -x (extract) command line option in unarj allows remote attackers to overwrite arbitrary files via an arj archive with filenames that conta…
CVE-2004-0947UShigh10.0—
Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames.
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

  • FixedRed Hat Enterprise Linux AS (Advanced Server) version 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2005:007
  • FixedRed Hat Enterprise Linux AS (Advanced Server) version 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2005:007
  • FixedRed Hat Enterprise Linux ES version 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2005:007
  • FixedRed Hat Enterprise Linux ES version 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2005:007
  • FixedRed Hat Enterprise Linux WS version 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2005:007
  • FixedRed Hat Enterprise Linux WS version 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2005:007
  • FixedRed Hat Linux Advanced Workstation 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2005:007
  • FixedRed Hat Linux Advanced Workstation 2.1

    Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/

    https://access.redhat.com/errata/RHSA-2005:007
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan