Summary
Check the version of unzip
Solution
Please Install the Updated Packages.
Insight
William Robinet discovered that unzip
incorrectly handled certain malformed zip archives. If a user or automated system were tricked into processing a specially crafted zip archive, an attacker could possibly execute arbitrary code.
Affected
unzip on Ubuntu 14.10 ,
Ubuntu 14.04 LTS ,
Ubuntu 12.04 LTS
Detection
Get the installed version with the help
of detect NVT and check if the version is vulnerable or not.
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2015-1315 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Ubuntu Update for debian-goodies vulnerability USN-526-1
- Ubuntu Update for exim4 USN-1130-1
- Ubuntu Update for dhcp vulnerability USN-531-1
- Ubuntu Update for dhcp vulnerability USN-531-2
- Ubuntu Update for apturl, Epiphany, gecko-sharp, gnome-python-extras, liferea, rhythmbox, totem, ubufox, yelp update USN-930-2