Nessus Plugin #15672

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA574] DSA-574-1 cabextract

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-574-1 cabextract

Version:

$Revision: 1.1 $

Cve_id:

CAN-2004-0916

Bugtraq_id:

-

Xrefs:

DSA:574

Description:

The upstream developers discovered a problem in cabextract, a tool to
extract cabinet files. The program was able to overwrite files in
upper directories. This could lead an attacker to overwrite arbitrary
files.
For the stable distribution (woody) this problem has been fixed in
version 0.2-2b.
For the unstable distribution (sid) this problem has been fixed in
version 1.1-1.
We recommend that you upgrade your cabextract package.


Solution : http://www.debian.org/security/2004/dsa-574
Risk factor : High