bzip2 Unspecified File Handling Vulnerability
BID:28286
Info
bzip2 Unspecified File Handling Vulnerability
| Bugtraq ID: | 28286 |
| Class: | Unknown |
| CVE: |
CVE-2008-1372 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 17 2008 12:00AM |
| Updated: | Apr 16 2015 05:48PM |
| Credit: | The University of Oulu discovered this issue. |
| Vulnerable: |
VMWare ESX Server 3.0.3 VMWare ESX Server 3.0.2 VMWare ESX Server 3.5 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu Ubuntu Linux 7.04 i386 Ubuntu Ubuntu Linux 7.04 amd64 Ubuntu Ubuntu Linux 6.10 sparc Ubuntu Ubuntu Linux 6.10 powerpc Ubuntu Ubuntu Linux 6.10 i386 Ubuntu Ubuntu Linux 6.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 8 SuSE SUSE Linux Enterprise Server 10 SP1 SuSE SUSE Linux Enterprise Server 10 SuSE SUSE Linux Enterprise SDK 10.SP1 SuSE SUSE Linux Enterprise SDK 10 SP1 SuSE SUSE Linux Enterprise SDK 10 SuSE SUSE Linux Enterprise Desktop 10 SP1 SuSE SUSE Linux Enterprise Desktop 10 SuSE SUSE Linux Enterprise 10 SP1 DEBUGINFO SuSE openSUSE 10.3 SuSE Linux Professional 10.2 x86_64 SuSE Linux Personal 10.2 x86_64 Sun Solaris 9_x86 Sun Solaris 9_sparc Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01 Sun OpenSolaris 0 Slackware Linux 10.2 Slackware Linux 10.1 Slackware Linux 10.0 Slackware Linux 9.1 Slackware Linux 9.0 Slackware Linux 8.1 Slackware Linux 12.0 Slackware Linux 11.0 S.u.S.E. UnitedLinux 1.0 S.u.S.E. SuSE Linux Standard Server 8.0 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SUSE LINUX Retail Solution 8.0 S.u.S.E. SuSE Linux Openexchange Server 4.0 S.u.S.E. SuSE Linux Open-Xchange 4.1 S.u.S.E. openSUSE 10.2 S.u.S.E. Open-Enterprise-Server 9.0 S.u.S.E. Open-Enterprise-Server 1 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop SDK 9.0 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Novell Linux Desktop 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 10.2 S.u.S.E. Linux Professional 10.1 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 10.2 S.u.S.E. Linux Personal 10.1 S.u.S.E. Linux Openexchange Server S.u.S.E. Linux Office Server S.u.S.E. Linux Desktop 10 S.u.S.E. Linux 10.1 x86-64 S.u.S.E. Linux 10.1 x86 S.u.S.E. Linux 10.1 ppc S.u.S.E. Linux 10.0 x86-64 S.u.S.E. Linux 10.0 x86 S.u.S.E. Linux 10.0 ppc rPath rPath Linux 1 rPath Appliance Platform Linux Service 1 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux WS 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux ES 4 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux Desktop Workstation 5 client RedHat Desktop 4.0 RedHat Desktop 3.0 RedHat Advanced Workstation for the Itanium Processor 2.1 IA64 RedHat Advanced Workstation for the Itanium Processor 2.1 Red Hat Fedora 7 Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux AS 4 Red Hat Enterprise Linux AS 3 Red Hat Enterprise Linux AS 2.1 IA64 Red Hat Enterprise Linux AS 2.1 Red Hat Enterprise Linux 5 Server NetBSD NetBSD Current NetBSD NetBSD 4.0 NetBSD NetBSD 3.1 Navision Financials Server 3.0 IPCop IPCop 1.4.18 IPCop IPCop 1.4.17 IPCop IPCop 1.4.16 IPCop IPCop 1.4.15 IPCop IPCop 1.4.14 IPCop IPCop 1.4.13 IPCop IPCop 1.4.12 IPCop IPCop 1.4.11 IPCop IPCop 1.4.10 Gentoo Linux bzip2 bzip2 1.0.4 bzip2 bzip2 1.0.3 bzip2 bzip2 1.0.2 bzip2 bzip2 1.0.1 bzip2 bzip2 1.0 bzip2 bzip2 0.9.5 d bzip2 bzip2 0.9.5 c bzip2 bzip2 0.9.5 b bzip2 bzip2 0.9.5 a bzip2 bzip2 0.9 c bzip2 bzip2 0.9 b bzip2 bzip2 0.9 a bzip2 bzip2 0.9 Avaya Voice Portal 4.1 Avaya Voice Portal 4.0 Avaya Voice Portal 3.0 Avaya Proactive Contact 4.0 Avaya Proactive Contact 3.0 Avaya Proactive Contact 0 Avaya Messaging Storage Server MM3.0 Avaya Messaging Storage Server 4.0 Avaya Messaging Storage Server 3.1 Avaya Messaging Storage Server 2.0 Avaya Messaging Storage Server 1.0 Avaya Messaging Storage Server Avaya Message Networking MN 3.1 Avaya Message Networking 3.1 Avaya Message Networking Avaya Meeting Exchange - Enterprise Edition Avaya Meeting Exchange 5.0 .0.52 Avaya Meeting Exchange 5.0 Avaya Intuity AUDIX LX 2.0 Avaya EMMC 1.021 Avaya EMMC 1.017 Avaya EMMC 0 Avaya Communication Manager 4.0.3 SP1 Avaya Communication Manager 3.1.4 SP2 Avaya Communication Manager 5.1 Avaya Communication Manager 5.0 SP3 Avaya Communication Manager 5.0 Avaya Communication Manager 4.0 Avaya Communication Manager 3.1 Avaya Aura SIP Enablement Services 5.0 Avaya Aura Application Enablement Services 4.2.1 Avaya Aura Application Enablement Services 3.1.6 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.5 |
| Not Vulnerable: |
IPCop IPCop 1.4.20 IPCop IPCop 1.4.19 bzip2 bzip2 1.0.5 Apple Mac OS X Server 10.5.8 Apple Mac OS X 10.5.8 |
Discussion
bzip2 Unspecified File Handling Vulnerability
The 'bzip2' application is prone to a remote file-handling vulnerability because it fails to properly handle malformed files.
Successful exploits may allow remote code to run, but this has not been confirmed. Exploit attempts will likely crash the application.
This issue affects bzip2 1.0.4; prior versions may also be affected.
The 'bzip2' application is prone to a remote file-handling vulnerability because it fails to properly handle malformed files.
Successful exploits may allow remote code to run, but this has not been confirmed. Exploit attempts will likely crash the application.
This issue affects bzip2 1.0.4; prior versions may also be affected.
Exploit / POC
bzip2 Unspecified File Handling Vulnerability
The Oulu University Secure Programming Group (OUSPG) at the University of Oulu in Finland created archive files designed to trigger this issue. The archive files may be obtained from the following URI:
http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/
The Oulu University Secure Programming Group (OUSPG) at the University of Oulu in Finland created archive files designed to trigger this issue. The archive files may be obtained from the following URI:
http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/
Solution / Fix
bzip2 Unspecified File Handling Vulnerability
Solution:
This issue is fixed in bzip2 1.0.5. Please see the references for more information.
bzip2 bzip2 0.9 b
bzip2 bzip2 0.9.5 b
bzip2 bzip2 1.0.1
Apple Mac OS X 10.4.11
Apple Mac OS X Server 10.4.11
Apple Mac OS X 10.5.2
Apple Mac OS X 10.5.3
Apple Mac OS X Server 10.5.3
Apple Mac OS X 10.5.4
Apple Mac OS X Server 10.5.5
Apple Mac OS X 10.5.6
Apple Mac OS X 10.5.7
Solution:
This issue is fixed in bzip2 1.0.5. Please see the references for more information.
bzip2 bzip2 0.9 b
-
bzip2 bzip2-1.0.5.tar.gz
http://bzip.org/1.0.5/bzip2-1.0.5.tar.gz
bzip2 bzip2 0.9.5 b
-
bzip2 bzip2-1.0.5.tar.gz
http://bzip.org/1.0.5/bzip2-1.0.5.tar.gz
bzip2 bzip2 1.0.1
-
bzip2 bzip2-1.0.5.tar.gz
http://bzip.org/1.0.5/bzip2-1.0.5.tar.gz
Apple Mac OS X 10.4.11
-
Apple SecUpd2009-003Intel.dmg
Intel
http://www.apple.com/support/downloads/ -
Apple SecUpd2009-003PPC.dmg
PPC
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.4.11
-
Apple SecUpdSrvr2009-003PPC.dmg
PowerPC
http://www.apple.com/support/downloads/ -
Apple SecUpdSrvr2009-003Univ.dmg
Universal
http://www.apple.com/support/downloads/
Apple Mac OS X 10.5.2
-
Apple MacOSXUpdCombo10.5.8.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X 10.5.3
-
Apple MacOSXUpdCombo10.5.8.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.5.3
-
Apple MacOSXServerUpdCombo10.5.8.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X 10.5.4
-
Apple MacOSXUpdCombo10.5.8.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X Server 10.5.5
-
Apple MacOSXServerUpdCombo10.5.8.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X 10.5.6
-
Apple MacOSXUpdCombo10.5.8.dmg
http://www.apple.com/support/downloads/
Apple Mac OS X 10.5.7
-
Apple MacOSXUpd10.5.8.dmg
http://www.apple.com/support/downloads/
References
bzip2 Unspecified File Handling Vulnerability
References:
References:
- bzip2 Homepage (bzip2)
- IPCop Home Page (IPCop)
- PROTOS Genome Test Suite c10-archive (Oulu University)
- 20469: CERT-FI and CPNI Joint Vulnerability Advisory on Archive Formats (CERT-FI)
- ASA-2008-404 - bzip2 security update (RHSA-2008-0893) (Avaya)
- IPCop 1.4.19 / 1.4.20 released (IPCop)
- Solution 241786 : A Security Vulnerability in the bzip2(1) command may lead t (Sun)