|
|
>> Fedora Security Update Fixes tar "safer_name_suffix()" Buffer Overflow
|
Title : Fedora Security Update Fixes tar "safer_name_suffix()" Buffer Overflow
VUPEN ID : VUPEN/ADV-2007-3657
CVE ID : CVE-2007-4476
Rated as : Moderate Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2007-10-30
|
A vulnerability has been identified in Fedora, which could be exploited by attackers to execute arbitrary code. This issue is caused by an error in Tar. For additional information, see : VUPEN/ADV-2007-3511
Affected Products
Fedora 7
Solution
Upgrade the affected packages :
c09659eac15f8e77065533c34af22253d2a46e53 tar-1.15.1-28.fc7.ppc64.rpm
458b97f6abd1acd618fa562d466a271b22006e6f tar-debuginfo-1.15.1-28.fc7.ppc64.rpm
f813a5b6c36a75318aaecf771101ad2ebd640fa6 tar-1.15.1-28.fc7.i386.rpm
b84314a9e349bc5c2588b6747b06756d565643a9 tar-debuginfo-1.15.1-28.fc7.i386.rpm
eea2f8078c49a09717df1d4f22ed9f7a1f326be2 tar-debuginfo-1.15.1-28.fc7.x86_64.rpm
44bba686adf4a5a2936773253687cdc897495407 tar-1.15.1-28.fc7.x86_64.rpm
848226382b22036efe7206d1114dc7bde6e1c52a tar-1.15.1-28.fc7.ppc.rpm
f6ede3c1738cf39dec8f8fa6732ab0d4cfbb897a tar-debuginfo-1.15.1-28.fc7.ppc.rpm
d7d03d1a399275ff8283344263d392664ef1754e tar-1.15.1-28.fc7.src.rpm
References
http://www.vupen.com/english/advisories/2007/3657
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00370.html
ChangeLog
2007-10-30 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
