The following security advisory is sent to the securiteam mailing list, and can
be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
unalz Filename Handling Directory Traversal
------------------------------------------------------------------------
SUMMARY
"unalz tool is the utility used for decompressing alzip format file. It
mainly operates on files with names ending in '.alz'."
With a specially crafted address it is possible to cause a directory
traversal and extract archive files in arbitrary locations.
DETAILS
Vulnerable Systems:
* unalz version 0.53
Immune Systems:
* unalz version 0.55
The vulnerability is caused due to an input validation error when
extracting an ALZ archive. This makes it possible to have files extracted
to arbitrary locations outside the specified directory using the "../"
directory traversal sequence.
CVE Information:
<http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0950>
CVE-2006-0950
Disclosure Timeline:
02/03/2006 - Initial vendor notification.
10/03/2006 - Initial vendor reply.
13/03/2006 - Public disclosure.
ADDITIONAL INFORMATION
The information has been provided by <mailto:remove-vuln@secunia.com>
Secunia Research.
The original article can be found at:
<http://secunia.com/secunia_research/2006-16/advisory/>
http://secunia.com/secunia_research/2006-16/advisory/
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to:
list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to:
list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any
kind.
In no event shall we be liable for any damages whatsoever including direct,
indirect, incidental, consequential, loss of business profits or special
damages.
