Re: New bugs discovered!

["Ciprian Csordas" <wye () electronic cores ro>]

http://rpmfind.net/linux/rpm2html/search.php?query=gzip

Wye

----- Original Message -----
From: "Baba Bogdan" <mayday () cad cj pcnet ro>
To: "vuln-dev" <vuln-dev () securityfocus com>
Sent: Tuesday, November 20, 2001 6:38 PM
Subject: Re: New bugs discovered!


> well if you tell me where can i find a version of gzip 1.3.x
> because on ftp.gnu.org www.gzip.org the latest version is 1.2.4a.
>
>
> Baba Bogdan
>
> On Mon, 19 Nov 2001, Bernhard Rosenkraenzer wrote:
>
> > On Sun, 18 Nov 2001, vuln-dev wrote:
> >
> > > GOBBLES security is happy to announce the discovery of multiple bugs
in
> > > /bin/gzip, which can be exploited remotely with a bit of creativity.
> > > Attached is our advisory on the matter.
> >
> > Current versions of gzip (1.3.x) are not vulnerable.
> >
> > LLaP
> > bero
> >
> > --
> > This message is provided to you under the terms outlined at
> > http://www.bero.org/terms.html