Info

Disclosure

Aug 30, 2004

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Zlib contains a flaw that may allow a local denial of service. The issue is triggered when the inflateBack() function processes a specifically crafted file, and will result in loss of availability for the service.

Classification

Location: Local Access Required
Attack Type: Denial of Service
Impact: Loss of Availability
Disclosure: OSVDB Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, various Linux distributions have released patches to address this vulnerability.

Products

zlib

1.2.1

References

Security Tracker: 1011085
Secunia Advisory ID: 11129 12396 12400 12402 12447 16526 17054 17288 17645 18377
CVE ID: 2004-0797 (see also: NVD)
Related OSVDB ID: 9360
Vendor Specific Advisory URL: ftp://ftp.sco.com/pub/openserver5/507/mp/osr507mp4/osr507mp4.htm ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt
Other Advisory URL: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.33/SCOSA-2005.33.txt http://security.gentoo.org/glsa/glsa-200408-26.xml
http://www.trustix.org/errata/2005/0055/
Keyword: SCOSA-2005.49

Credit

Johan Thelmén -

Direct URL: http://osvdb.org/9361