• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Info-ZIP UnZip CHMod File Permission Modification Race Condition Weakness

Solution:
Please see the referenced advisories for more information.


SCO Open Server 5.0.7

• SCO 507/VOL.000.000
  ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.39/507

Info-ZIP UnZip 5.50

• Conectiva unzip-5.52-76281U10_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/unzip-5.52-76281U10_2cl.i3 86.rpm


• Debian unzip_5.50-1woody5_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_arm.deb


• Debian unzip_5.50-1woody5_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_hppa.deb


• Debian unzip_5.50-1woody5_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_i386.deb


• Debian unzip_5.50-1woody5_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_ia64.deb


• Debian unzip_5.50-1woody5_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_m68k.deb


• Debian unzip_5.50-1woody5_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_mips.deb


• Debian unzip_5.50-1woody5_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_mipsel.deb


• Debian unzip_5.50-1woody5_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_powerpc.deb


• Debian unzip_5.50-1woody5_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_s390.deb


• Debian unzip_5.50-1woody5_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 5_sparc.deb


• Debian unzip_5.52-1sarge3_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_alpha.deb


• Debian unzip_5.52-1sarge3_amd64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_amd64.deb


• Debian unzip_5.52-1sarge3_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_i386.deb


• Debian unzip_5.52-1sarge3_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_ia64.deb


• Debian unzip_5.50-1woody4_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_alpha.deb


• Debian unzip_5.50-1woody4_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_arm.deb


• Debian unzip_5.50-1woody4_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_hppa.deb


• Debian unzip_5.50-1woody4_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_i386.deb


• Debian unzip_5.50-1woody4_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_ia64.deb


• Debian unzip_5.50-1woody4_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_m68k.deb


• Debian unzip_5.50-1woody4_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_mips.deb


• Debian unzip_5.50-1woody4_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_mipsel.deb


• Debian unzip_5.50-1woody4_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_powerpc.deb


• Debian unzip_5.50-1woody4_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_s390.deb


• Debian unzip_5.50-1woody4_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.50-1woody 4_sparc.deb

Info-ZIP UnZip 5.51

• RedHat Fedora unzip-5.51-4.fc3.i386.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat Fedora unzip-5.51-4.fc3.x86_64.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat Fedora unzip-debuginfo-5.51-4.fc3.i386.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat Fedora unzip-debuginfo-5.51-4.fc3.x86_64.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Trustix unzip-5.51-2tr.i586.rpm
  ftp://ftp.trustix.org/pub/trustix/updates/2.2/rpms/unzip-5.51-2tr.i586 .rpm


• Ubuntu unzip_5.51-2ubuntu0.2_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/u/unzip/unzip_5.51-2ubuntu 0.2_amd64.deb


• Ubuntu unzip_5.51-2ubuntu0.2_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/u/unzip/unzip_5.51-2ubuntu 0.2_i386.deb


• Ubuntu unzip_5.51-2ubuntu0.2_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/u/unzip/unzip_5.51-2ubuntu 0.2_powerpc.deb


• Ubuntu unzip_5.51-2ubuntu1.2_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/u/unzip/unzip_5.51-2ubuntu 1.2_amd64.deb


• Ubuntu unzip_5.51-2ubuntu1.2_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/u/unzip/unzip_5.51-2ubuntu 1.2_i386.deb


• Ubuntu unzip_5.51-2ubuntu1.2_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/u/unzip/unzip_5.51-2ubuntu 1.2_powerpc.deb

Info-ZIP UnZip 5.52

• Conectiva unzip-5.52-76281U10_2cl.i386.rpm
  Version: 10.0
  ftp://atualizacoes.conectiva.com.br/10/RPMS/unzip-5.52-76281U10_2cl.i3 86.rpm


• Debian unzip_5.52-1sarge3_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_alpha.deb


• Debian unzip_5.52-1sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_amd64.deb


• Debian unzip_5.52-1sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_arm.deb


• Debian unzip_5.52-1sarge3_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_alpha.de


• Debian unzip_5.52-1sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_hppa.deb


• Debian unzip_5.52-1sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_i386.deb


• Debian unzip_5.52-1sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_ia64.deb


• Debian unzip_5.52-1sarge3_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_m68k.deb


• Debian unzip_5.52-1sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_mips.deb


• Debian unzip_5.52-1sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_mipsel.deb


• Debian unzip_5.52-1sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_powerpc.deb


• Debian unzip_5.52-1sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_s390.deb


• Debian unzip_5.52-1sarge3_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 3_sparc.deb


• Debian unzip_5.52-1sarge2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 2_alpha.deb


• Debian unzip_5.52-1sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 2_amd64.deb


• Debian unzip_5.52-1sarge2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 2_arm.deb


• Debian unzip_5.52-1sarge2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 2_hppa.deb


• Debian unzip_5.52-1sarge2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 2_i386.deb


• Debian unzip_5.52-1sarge2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 2_ia64.deb


• Debian unzip_5.52-1sarge2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 2_m68k.deb


• Debian unzip_5.52-1sarge2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 2_mips.deb


• Debian unzip_5.52-1sarge2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 2_mipsel.deb


• Debian unzip_5.52-1sarge2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 2_powerpc.deb


• Debian unzip_5.52-1sarge2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 2_s390.deb


• Debian unzip_5.52-1sarge2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/u/unzip/unzip_5.52-1sarge 2_sparc.deb


• Trustix unzip-5.52-4tr.i586.rpm
  ftp://ftp.trustix.org/pub/trustix/updates/3.0/rpms/unzip-5.52-4tr.i586 .rpm

SCO Open Server 6.0

• SCO 600/VOL.000.000
  ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.39/600