Vulnerability-Lookup

CVE-2005-2096 (GCVE-0-2005-2096)

Vulnerability from cvelistv5 – Published: 2005-07-06 04:00 – Updated: 2024-08-07 22:15

Summary

zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.

Severity ?

No CVSS data available.

CWE

Assigner

redhat

References

URL

RHSA-2008:0629

Vulnerability from csaf_redhat - Published: 2008-08-13 14:16 - Updated: 2026-01-08 09:21

Summary

Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update

Notes

Topic

Red Hat Network Satellite Server version 5.1.1 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server Solaris client components. This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Details

This release corrects several security vulnerabilities in components shipped as part of the Red Hat Network Satellite Server Solaris client. In a typical operating environment, these components are not used by the Satellite Server in a vulnerable manner. These security updates will reduce risk should these components be used by other applications. Several flaws in Zlib were discovered. An attacker could create a carefully-crafted compressed stream that would cause an application to crash if the stream was opened by a user. (CVE-2005-2096, CVE-2005-1849) A buffer overflow was discovered in the OpenSSL SSL_get_shared_ciphers() utility function. An attacker could send a list of ciphers to an application that used this function and overrun a buffer (CVE-2006-3738). A flaw in the SSLv2 client code was discovered. If a client application used OpenSSL to create an SSLv2 connection to a malicious server, that server could cause the client to crash. (CVE-2006-4343) An attack on OpenSSL PKCS #1 v1.5 signatures was discovered. Where an RSA key with exponent 3 was used an attacker could, potentially, forge a PKCS #1 v1.5 signature that would be incorrectly verified by implementations that do not check for excess data in the RSA exponentiation result of the signature. This issue affected applications that use OpenSSL to verify X.509 certificates as well as other uses of PKCS #1 v1.5. (CVE-2006-4339) OpenSSL contained a software work-around for a bug in SSL handling in Microsoft Internet Explorer version 3.0.2. It is enabled in most servers that use OpenSSL to provide support for SSL and TLS. This work-around was vulnerable to a man-in-the-middle attack which allowed a remote user to force an SSL connection to use SSL 2.0, rather than a stronger protocol, such as SSL 3.0 or TLS 1.0. (CVE-2005-2969) During OpenSSL parsing of certain invalid ASN.1 structures, an error condition was mishandled. This could result in an infinite loop which consumed system memory (CVE-2006-2937). Certain public key types could take disproportionate amounts of time to process in OpenSSL, leading to a denial of service. (CVE-2006-2940) A flaw was discovered in the Python repr() function's handling of UTF-32/UCS-4 strings. If an application used the repr() function on untrusted data, this could lead to a denial of service or, possibly, allow the execution of arbitrary code with the privileges of the application using the flawed function. (CVE-2006-4980) A flaw was discovered in the strxfrm() function of Python's locale module. Strings generated by this function were not properly NULL-terminated. This could, potentially, cause disclosure of data stored in the memory of an application using this function. (CVE-2007-2052) Multiple integer overflow flaws were discovered in Python's imageop module. If an application used the imageop module to process untrusted images, it could cause the application to crash, enter an infinite loop, or, possibly, execute arbitrary code with the privileges of the Python interpreter. (CVE-2007-4965) A stack-based buffer overflow was discovered in the Python interpreter, which could allow a local user to gain privileges by running a script with a long name from the current working directory. (CVE-2006-1542) Users of Red Hat Network Satellite Server should upgrade to these updated packages, which contain backported patches to correct these issues.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Network Satellite Server version 5.1.1 is now available. This\nupdate includes fixes for a number of security issues in Red Hat Network\nSatellite Server Solaris client components.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release corrects several security vulnerabilities in components\nshipped as part of the Red Hat Network Satellite Server Solaris client. In\na typical operating environment, these components are not used by the\nSatellite Server in a vulnerable manner. These security updates will reduce\nrisk should these components be used by other applications.\n\nSeveral flaws in Zlib were discovered. An attacker could create a\ncarefully-crafted compressed stream that would cause an application to\ncrash if the stream was opened by a user. (CVE-2005-2096, CVE-2005-1849)\n\nA buffer overflow was discovered in the OpenSSL SSL_get_shared_ciphers()\nutility function. An attacker could send a list of ciphers to an\napplication that used this function and overrun a buffer (CVE-2006-3738).\n\nA flaw in the SSLv2 client code was discovered. If a client application\nused OpenSSL to create an SSLv2 connection to a malicious server, that\nserver could cause the client to crash. (CVE-2006-4343)\n\nAn attack on OpenSSL PKCS #1 v1.5 signatures was discovered. Where an RSA\nkey with exponent 3 was used an attacker could, potentially, forge a PKCS\n#1 v1.5 signature that would be incorrectly verified by implementations\nthat do not check for excess data in the RSA exponentiation result of the\nsignature. This issue affected applications that use OpenSSL to verify\nX.509 certificates as well as other uses of PKCS #1 v1.5. (CVE-2006-4339)\n\nOpenSSL contained a software work-around for a bug in SSL handling in\nMicrosoft Internet Explorer version 3.0.2. It is enabled in most servers\nthat use OpenSSL to provide support for SSL and TLS. This work-around was\nvulnerable to a man-in-the-middle attack which allowed a remote user to\nforce an SSL connection to use SSL 2.0, rather than a stronger protocol,\nsuch as SSL 3.0 or TLS 1.0. (CVE-2005-2969)\n\nDuring OpenSSL parsing of certain invalid ASN.1 structures, an error\ncondition was mishandled. This could result in an infinite loop which\nconsumed system memory (CVE-2006-2937).\n\nCertain public key types could take disproportionate amounts of time to\nprocess in OpenSSL, leading to a denial of service. (CVE-2006-2940)\n\nA flaw was discovered in the Python repr() function\u0027s handling of\nUTF-32/UCS-4 strings. If an application used the repr() function on\nuntrusted data, this could lead to a denial of service or, possibly, allow\nthe execution of arbitrary code with the privileges of the application\nusing the flawed function. (CVE-2006-4980)\n\nA flaw was discovered in the strxfrm() function of Python\u0027s locale module.\nStrings generated by this function were not properly NULL-terminated. This\ncould, potentially, cause disclosure of data stored in the memory of an\napplication using this function. (CVE-2007-2052)\n\nMultiple integer overflow flaws were discovered in Python\u0027s imageop module.\nIf an application used the imageop module to process untrusted images, it\ncould cause the application to crash, enter an infinite loop, or, possibly,\nexecute arbitrary code with the privileges of the Python interpreter.\n(CVE-2007-4965)\n\nA stack-based buffer overflow was discovered in the Python interpreter,\nwhich could allow a local user to gain privileges by running a script with\na long name from the current working directory. (CVE-2006-1542)\n\nUsers of Red Hat Network Satellite Server should upgrade to these updated\npackages, which contain backported patches to correct these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2008:0629",
        "url": "https://access.redhat.com/errata/RHSA-2008:0629"
      },
      {
        "category": "external",
        "summary": "430652",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430652"
      },
      {
        "category": "external",
        "summary": "430654",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430654"
      },
      {
        "category": "external",
        "summary": "430655",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430655"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "235093",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=235093"
      },
      {
        "category": "external",
        "summary": "295971",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=295971"
      },
      {
        "category": "external",
        "summary": "430640",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430640"
      },
      {
        "category": "external",
        "summary": "430641",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430641"
      },
      {
        "category": "external",
        "summary": "430649",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430649"
      },
      {
        "category": "external",
        "summary": "430650",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430650"
      },
      {
        "category": "external",
        "summary": "430659",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430659"
      },
      {
        "category": "external",
        "summary": "430651",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430651"
      },
      {
        "category": "external",
        "summary": "430660",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430660"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0629.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update",
    "tracking": {
      "current_release_date": "2026-01-08T09:21:14+00:00",
      "generator": {
        "date": "2026-01-08T09:21:14+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.14"
        }
      },
      "id": "RHSA-2008:0629",
      "initial_release_date": "2008-08-13T14:16:00+00:00",
      "revision_history": [
        {
          "date": "2008-08-13T14:16:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2008-08-13T10:16:13+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-01-08T09:21:14+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Satellite 5.1 (RHEL v.4 AS)",
                "product": {
                  "name": "Red Hat Satellite 5.1 (RHEL v.4 AS)",
                  "product_id": "4AS-RHNSAT5.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:network_satellite:5.1::el4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Satellite"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhn-solaris-bootstrap-0:5.1.1-3.noarch",
                "product": {
                  "name": "rhn-solaris-bootstrap-0:5.1.1-3.noarch",
                  "product_id": "rhn-solaris-bootstrap-0:5.1.1-3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rhn-solaris-bootstrap@5.1.1-3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch",
                "product": {
                  "name": "rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch",
                  "product_id": "rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rhn_solaris_bootstrap_5_1_1_3@1-0?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhn-solaris-bootstrap-0:5.1.1-3.noarch as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)",
          "product_id": "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch"
        },
        "product_reference": "rhn-solaris-bootstrap-0:5.1.1-3.noarch",
        "relates_to_product_reference": "4AS-RHNSAT5.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)",
          "product_id": "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
        },
        "product_reference": "rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch",
        "relates_to_product_reference": "4AS-RHNSAT5.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2005-1849",
      "discovery_date": "2006-07-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430649"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "No description is available for this CVE.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "zlib DoS",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
          "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2005-1849"
        },
        {
          "category": "external",
          "summary": "RHBZ#430649",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430649"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2005-1849",
          "url": "https://www.cve.org/CVERecord?id=CVE-2005-1849"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-1849",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-1849"
        }
      ],
      "release_date": "2005-08-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-08-13T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
            "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0629"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "zlib DoS"
    },
    {
      "cve": "CVE-2005-2096",
      "discovery_date": "2006-06-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430650"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "zlib DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
          "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2005-2096"
        },
        {
          "category": "external",
          "summary": "RHBZ#430650",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430650"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2005-2096",
          "url": "https://www.cve.org/CVERecord?id=CVE-2005-2096"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-2096",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2096"
        }
      ],
      "release_date": "2005-07-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-08-13T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
            "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0629"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "zlib DoS"
    },
    {
      "cve": "CVE-2005-2969",
      "discovery_date": "2005-10-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430660"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl mitm downgrade attack",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
          "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2005-2969"
        },
        {
          "category": "external",
          "summary": "RHBZ#430660",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430660"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2005-2969",
          "url": "https://www.cve.org/CVERecord?id=CVE-2005-2969"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-2969",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2969"
        }
      ],
      "release_date": "2005-10-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-08-13T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
            "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0629"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl mitm downgrade attack"
    },
    {
      "cve": "CVE-2006-1542",
      "discovery_date": "2006-03-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430640"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "No description is available for this CVE.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python buffer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\nhttps://access.redhat.com/security/updates/classification/\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
          "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-1542"
        },
        {
          "category": "external",
          "summary": "RHBZ#430640",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430640"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-1542",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-1542"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-1542",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-1542"
        }
      ],
      "release_date": "2005-09-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-08-13T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
            "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0629"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "python buffer overflow"
    },
    {
      "cve": "CVE-2006-2937",
      "discovery_date": "2006-07-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430655"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl ASN.1 DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
          "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2937"
        },
        {
          "category": "external",
          "summary": "RHBZ#430655",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430655"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2937",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2937"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2937",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2937"
        }
      ],
      "release_date": "2006-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-08-13T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
            "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0629"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl ASN.1 DoS"
    },
    {
      "cve": "CVE-2006-2940",
      "discovery_date": "2006-07-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430654"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) \"public exponent\" or (2) \"public modulus\" values in X.509 certificates that require extra time to process when using RSA signature verification.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl public key DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
          "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2940"
        },
        {
          "category": "external",
          "summary": "RHBZ#430654",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430654"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2940",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2940"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2940",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2940"
        }
      ],
      "release_date": "2006-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-08-13T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
            "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0629"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl public key DoS"
    },
    {
      "cve": "CVE-2006-3738",
      "discovery_date": "2006-08-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430652"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl get_shared_ciphers overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
          "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3738"
        },
        {
          "category": "external",
          "summary": "RHBZ#430652",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430652"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3738",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3738"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3738",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3738"
        }
      ],
      "release_date": "2006-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-08-13T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
            "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0629"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "openssl get_shared_ciphers overflow"
    },
    {
      "cve": "CVE-2006-4339",
      "discovery_date": "2006-09-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430659"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying X.509 and other certificates that use PKCS #1.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl signature forgery",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
          "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-4339"
        },
        {
          "category": "external",
          "summary": "RHBZ#430659",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430659"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-4339",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-4339"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4339",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4339"
        }
      ],
      "release_date": "2006-09-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-08-13T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
            "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0629"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "openssl signature forgery"
    },
    {
      "cve": "CVE-2006-4343",
      "discovery_date": "2006-08-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430651"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl sslv2 client code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
          "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-4343"
        },
        {
          "category": "external",
          "summary": "RHBZ#430651",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430651"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-4343",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-4343"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4343",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4343"
        }
      ],
      "release_date": "2006-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-08-13T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
            "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0629"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl sslv2 client code"
    },
    {
      "cve": "CVE-2006-4980",
      "discovery_date": "2006-09-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430641"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python repr unicode buffer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
          "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-4980"
        },
        {
          "category": "external",
          "summary": "RHBZ#430641",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430641"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-4980",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-4980"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4980",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4980"
        }
      ],
      "release_date": "2006-08-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-08-13T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
            "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0629"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python repr unicode buffer overflow"
    },
    {
      "cve": "CVE-2007-2052",
      "cwe": {
        "id": "CWE-193",
        "name": "Off-by-one Error"
      },
      "discovery_date": "2007-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "235093"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python off-by-one locale.strxfrm() (possible memory disclosure)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\nhttps://access.redhat.com/security/updates/classification/",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
          "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-2052"
        },
        {
          "category": "external",
          "summary": "RHBZ#235093",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=235093"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-2052",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-2052"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-2052",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-2052"
        }
      ],
      "release_date": "2007-04-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-08-13T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
            "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0629"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "python off-by-one locale.strxfrm() (possible memory disclosure)"
    },
    {
      "cve": "CVE-2007-4965",
      "discovery_date": "2007-09-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "295971"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "No description is available for this CVE.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python imageop module heap corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=295971\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
          "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-4965"
        },
        {
          "category": "external",
          "summary": "RHBZ#295971",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=295971"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-4965",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-4965"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-4965",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-4965"
        }
      ],
      "release_date": "2007-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-08-13T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-RHNSAT5.1:rhn-solaris-bootstrap-0:5.1.1-3.noarch",
            "4AS-RHNSAT5.1:rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0629"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "python imageop module heap corruption"
    }
  ]
}

RHSA-2005:569

Vulnerability from csaf_redhat - Published: 2005-07-06 14:30 - Updated: 2025-11-21 17:29

Summary

Red Hat Security Advisory: zlib security update

Notes

Topic

Updated Zlib packages that fix a buffer overflow are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team.

Details

Zlib is a general-purpose lossless data compression library which is used by many different programs. Tavis Ormandy discovered a buffer overflow affecting Zlib version 1.2 and above. An attacker could create a carefully crafted compressed stream that would cause an application to crash if the stream is opened by a user. As an example, an attacker could create a malicious PNG image file which would cause a web browser or mail viewer to crash if the image is viewed. The Common Vulnerabilities and Exposures project assigned the name CAN-2005-2096 to this issue. Please note that the versions of Zlib as shipped with Red Hat Enterprise Linux 2.1 and 3 are not vulnerable to this issue. All users should update to these erratum packages which contain a patch from Mark Adler which corrects this issue.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated Zlib packages that fix a buffer overflow are now available for Red\nHat Enterprise Linux 4.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Zlib is a general-purpose lossless data compression library which is used\nby many different programs.\n\nTavis Ormandy discovered a buffer overflow affecting Zlib version 1.2 and\nabove.  An attacker could create a carefully crafted compressed stream that\nwould cause an application to crash if the stream is opened by a user.  As\nan example, an attacker could create a malicious PNG image file which would\ncause a web browser or mail viewer to crash if the image is viewed.  The\nCommon Vulnerabilities and Exposures project assigned the name\nCAN-2005-2096 to this issue.\n\nPlease note that the versions of Zlib as shipped with Red Hat Enterprise\nLinux 2.1 and 3 are not vulnerable to this issue.\n\nAll users should update to these erratum packages which contain a patch\nfrom Mark Adler which corrects this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2005:569",
        "url": "https://access.redhat.com/errata/RHSA-2005:569"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "162391",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=162391"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_569.json"
      }
    ],
    "title": "Red Hat Security Advisory: zlib security update",
    "tracking": {
      "current_release_date": "2025-11-21T17:29:18+00:00",
      "generator": {
        "date": "2025-11-21T17:29:18+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2005:569",
      "initial_release_date": "2005-07-06T14:30:00+00:00",
      "revision_history": [
        {
          "date": "2005-07-06T14:30:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2005-07-06T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T17:29:18+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4",
                  "product_id": "4AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop version 4",
                  "product_id": "4Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4",
                  "product_id": "4ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4",
                  "product_id": "4WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "zlib-0:1.2.1.2-1.1.ia64",
                "product": {
                  "name": "zlib-0:1.2.1.2-1.1.ia64",
                  "product_id": "zlib-0:1.2.1.2-1.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib@1.2.1.2-1.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "zlib-devel-0:1.2.1.2-1.1.ia64",
                "product": {
                  "name": "zlib-devel-0:1.2.1.2-1.1.ia64",
                  "product_id": "zlib-devel-0:1.2.1.2-1.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib-devel@1.2.1.2-1.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "zlib-debuginfo-0:1.2.1.2-1.1.ia64",
                "product": {
                  "name": "zlib-debuginfo-0:1.2.1.2-1.1.ia64",
                  "product_id": "zlib-debuginfo-0:1.2.1.2-1.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib-debuginfo@1.2.1.2-1.1?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "zlib-0:1.2.1.2-1.1.i386",
                "product": {
                  "name": "zlib-0:1.2.1.2-1.1.i386",
                  "product_id": "zlib-0:1.2.1.2-1.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib@1.2.1.2-1.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "zlib-debuginfo-0:1.2.1.2-1.1.i386",
                "product": {
                  "name": "zlib-debuginfo-0:1.2.1.2-1.1.i386",
                  "product_id": "zlib-debuginfo-0:1.2.1.2-1.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib-debuginfo@1.2.1.2-1.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "zlib-devel-0:1.2.1.2-1.1.i386",
                "product": {
                  "name": "zlib-devel-0:1.2.1.2-1.1.i386",
                  "product_id": "zlib-devel-0:1.2.1.2-1.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib-devel@1.2.1.2-1.1?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "zlib-0:1.2.1.2-1.1.src",
                "product": {
                  "name": "zlib-0:1.2.1.2-1.1.src",
                  "product_id": "zlib-0:1.2.1.2-1.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib@1.2.1.2-1.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "zlib-0:1.2.1.2-1.1.x86_64",
                "product": {
                  "name": "zlib-0:1.2.1.2-1.1.x86_64",
                  "product_id": "zlib-0:1.2.1.2-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib@1.2.1.2-1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "zlib-devel-0:1.2.1.2-1.1.x86_64",
                "product": {
                  "name": "zlib-devel-0:1.2.1.2-1.1.x86_64",
                  "product_id": "zlib-devel-0:1.2.1.2-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib-devel@1.2.1.2-1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "zlib-debuginfo-0:1.2.1.2-1.1.x86_64",
                "product": {
                  "name": "zlib-debuginfo-0:1.2.1.2-1.1.x86_64",
                  "product_id": "zlib-debuginfo-0:1.2.1.2-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib-debuginfo@1.2.1.2-1.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "zlib-0:1.2.1.2-1.1.ppc64",
                "product": {
                  "name": "zlib-0:1.2.1.2-1.1.ppc64",
                  "product_id": "zlib-0:1.2.1.2-1.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib@1.2.1.2-1.1?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "zlib-devel-0:1.2.1.2-1.1.ppc64",
                "product": {
                  "name": "zlib-devel-0:1.2.1.2-1.1.ppc64",
                  "product_id": "zlib-devel-0:1.2.1.2-1.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib-devel@1.2.1.2-1.1?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "zlib-debuginfo-0:1.2.1.2-1.1.ppc64",
                "product": {
                  "name": "zlib-debuginfo-0:1.2.1.2-1.1.ppc64",
                  "product_id": "zlib-debuginfo-0:1.2.1.2-1.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib-debuginfo@1.2.1.2-1.1?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "zlib-0:1.2.1.2-1.1.ppc",
                "product": {
                  "name": "zlib-0:1.2.1.2-1.1.ppc",
                  "product_id": "zlib-0:1.2.1.2-1.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib@1.2.1.2-1.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "zlib-devel-0:1.2.1.2-1.1.ppc",
                "product": {
                  "name": "zlib-devel-0:1.2.1.2-1.1.ppc",
                  "product_id": "zlib-devel-0:1.2.1.2-1.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib-devel@1.2.1.2-1.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "zlib-debuginfo-0:1.2.1.2-1.1.ppc",
                "product": {
                  "name": "zlib-debuginfo-0:1.2.1.2-1.1.ppc",
                  "product_id": "zlib-debuginfo-0:1.2.1.2-1.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib-debuginfo@1.2.1.2-1.1?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "zlib-0:1.2.1.2-1.1.s390",
                "product": {
                  "name": "zlib-0:1.2.1.2-1.1.s390",
                  "product_id": "zlib-0:1.2.1.2-1.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib@1.2.1.2-1.1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "zlib-devel-0:1.2.1.2-1.1.s390",
                "product": {
                  "name": "zlib-devel-0:1.2.1.2-1.1.s390",
                  "product_id": "zlib-devel-0:1.2.1.2-1.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib-devel@1.2.1.2-1.1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "zlib-debuginfo-0:1.2.1.2-1.1.s390",
                "product": {
                  "name": "zlib-debuginfo-0:1.2.1.2-1.1.s390",
                  "product_id": "zlib-debuginfo-0:1.2.1.2-1.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib-debuginfo@1.2.1.2-1.1?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "zlib-0:1.2.1.2-1.1.s390x",
                "product": {
                  "name": "zlib-0:1.2.1.2-1.1.s390x",
                  "product_id": "zlib-0:1.2.1.2-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib@1.2.1.2-1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "zlib-devel-0:1.2.1.2-1.1.s390x",
                "product": {
                  "name": "zlib-devel-0:1.2.1.2-1.1.s390x",
                  "product_id": "zlib-devel-0:1.2.1.2-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib-devel@1.2.1.2-1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "zlib-debuginfo-0:1.2.1.2-1.1.s390x",
                "product": {
                  "name": "zlib-debuginfo-0:1.2.1.2-1.1.s390x",
                  "product_id": "zlib-debuginfo-0:1.2.1.2-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/zlib-debuginfo@1.2.1.2-1.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-0:1.2.1.2-1.1.i386"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-0:1.2.1.2-1.1.ia64"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-0:1.2.1.2-1.1.ppc"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-0:1.2.1.2-1.1.ppc64"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.ppc64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-0:1.2.1.2-1.1.s390"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-0:1.2.1.2-1.1.s390x"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.src as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-0:1.2.1.2-1.1.src"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.src",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-0:1.2.1.2-1.1.x86_64"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-debuginfo-0:1.2.1.2-1.1.i386"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-debuginfo-0:1.2.1.2-1.1.ia64"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-debuginfo-0:1.2.1.2-1.1.ppc"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-debuginfo-0:1.2.1.2-1.1.ppc64"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.ppc64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-debuginfo-0:1.2.1.2-1.1.s390"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-debuginfo-0:1.2.1.2-1.1.s390x"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-debuginfo-0:1.2.1.2-1.1.x86_64"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-devel-0:1.2.1.2-1.1.i386"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-devel-0:1.2.1.2-1.1.ia64"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-devel-0:1.2.1.2-1.1.ppc"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-devel-0:1.2.1.2-1.1.ppc64"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.ppc64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-devel-0:1.2.1.2-1.1.s390"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-devel-0:1.2.1.2-1.1.s390x"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:zlib-devel-0:1.2.1.2-1.1.x86_64"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-0:1.2.1.2-1.1.i386"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-0:1.2.1.2-1.1.ia64"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-0:1.2.1.2-1.1.ppc"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-0:1.2.1.2-1.1.ppc64"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.ppc64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-0:1.2.1.2-1.1.s390"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-0:1.2.1.2-1.1.s390x"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.src as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-0:1.2.1.2-1.1.src"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.src",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-0:1.2.1.2-1.1.x86_64"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.i386"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.ia64"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.ppc"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.ppc64"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.ppc64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.s390"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.s390x"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.x86_64"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-devel-0:1.2.1.2-1.1.i386"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-devel-0:1.2.1.2-1.1.ia64"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-devel-0:1.2.1.2-1.1.ppc"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-devel-0:1.2.1.2-1.1.ppc64"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.ppc64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-devel-0:1.2.1.2-1.1.s390"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-devel-0:1.2.1.2-1.1.s390x"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:zlib-devel-0:1.2.1.2-1.1.x86_64"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-0:1.2.1.2-1.1.i386"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-0:1.2.1.2-1.1.ia64"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-0:1.2.1.2-1.1.ppc"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-0:1.2.1.2-1.1.ppc64"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.ppc64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-0:1.2.1.2-1.1.s390"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-0:1.2.1.2-1.1.s390x"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.src as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-0:1.2.1.2-1.1.src"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.src",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-0:1.2.1.2-1.1.x86_64"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-debuginfo-0:1.2.1.2-1.1.i386"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-debuginfo-0:1.2.1.2-1.1.ia64"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-debuginfo-0:1.2.1.2-1.1.ppc"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-debuginfo-0:1.2.1.2-1.1.ppc64"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.ppc64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-debuginfo-0:1.2.1.2-1.1.s390"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-debuginfo-0:1.2.1.2-1.1.s390x"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-debuginfo-0:1.2.1.2-1.1.x86_64"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-devel-0:1.2.1.2-1.1.i386"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-devel-0:1.2.1.2-1.1.ia64"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-devel-0:1.2.1.2-1.1.ppc"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-devel-0:1.2.1.2-1.1.ppc64"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.ppc64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-devel-0:1.2.1.2-1.1.s390"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-devel-0:1.2.1.2-1.1.s390x"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:zlib-devel-0:1.2.1.2-1.1.x86_64"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-0:1.2.1.2-1.1.i386"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-0:1.2.1.2-1.1.ia64"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-0:1.2.1.2-1.1.ppc"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-0:1.2.1.2-1.1.ppc64"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.ppc64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-0:1.2.1.2-1.1.s390"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-0:1.2.1.2-1.1.s390x"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.src as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-0:1.2.1.2-1.1.src"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.src",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-0:1.2.1.2-1.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-0:1.2.1.2-1.1.x86_64"
        },
        "product_reference": "zlib-0:1.2.1.2-1.1.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-debuginfo-0:1.2.1.2-1.1.i386"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-debuginfo-0:1.2.1.2-1.1.ia64"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-debuginfo-0:1.2.1.2-1.1.ppc"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-debuginfo-0:1.2.1.2-1.1.ppc64"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.ppc64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-debuginfo-0:1.2.1.2-1.1.s390"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-debuginfo-0:1.2.1.2-1.1.s390x"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-debuginfo-0:1.2.1.2-1.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-debuginfo-0:1.2.1.2-1.1.x86_64"
        },
        "product_reference": "zlib-debuginfo-0:1.2.1.2-1.1.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-devel-0:1.2.1.2-1.1.i386"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-devel-0:1.2.1.2-1.1.ia64"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-devel-0:1.2.1.2-1.1.ppc"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-devel-0:1.2.1.2-1.1.ppc64"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.ppc64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-devel-0:1.2.1.2-1.1.s390"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-devel-0:1.2.1.2-1.1.s390x"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zlib-devel-0:1.2.1.2-1.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:zlib-devel-0:1.2.1.2-1.1.x86_64"
        },
        "product_reference": "zlib-devel-0:1.2.1.2-1.1.x86_64",
        "relates_to_product_reference": "4WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2005-2096",
      "discovery_date": "2006-06-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430650"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "zlib DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:zlib-0:1.2.1.2-1.1.i386",
          "4AS:zlib-0:1.2.1.2-1.1.ia64",
          "4AS:zlib-0:1.2.1.2-1.1.ppc",
          "4AS:zlib-0:1.2.1.2-1.1.ppc64",
          "4AS:zlib-0:1.2.1.2-1.1.s390",
          "4AS:zlib-0:1.2.1.2-1.1.s390x",
          "4AS:zlib-0:1.2.1.2-1.1.src",
          "4AS:zlib-0:1.2.1.2-1.1.x86_64",
          "4AS:zlib-debuginfo-0:1.2.1.2-1.1.i386",
          "4AS:zlib-debuginfo-0:1.2.1.2-1.1.ia64",
          "4AS:zlib-debuginfo-0:1.2.1.2-1.1.ppc",
          "4AS:zlib-debuginfo-0:1.2.1.2-1.1.ppc64",
          "4AS:zlib-debuginfo-0:1.2.1.2-1.1.s390",
          "4AS:zlib-debuginfo-0:1.2.1.2-1.1.s390x",
          "4AS:zlib-debuginfo-0:1.2.1.2-1.1.x86_64",
          "4AS:zlib-devel-0:1.2.1.2-1.1.i386",
          "4AS:zlib-devel-0:1.2.1.2-1.1.ia64",
          "4AS:zlib-devel-0:1.2.1.2-1.1.ppc",
          "4AS:zlib-devel-0:1.2.1.2-1.1.ppc64",
          "4AS:zlib-devel-0:1.2.1.2-1.1.s390",
          "4AS:zlib-devel-0:1.2.1.2-1.1.s390x",
          "4AS:zlib-devel-0:1.2.1.2-1.1.x86_64",
          "4Desktop:zlib-0:1.2.1.2-1.1.i386",
          "4Desktop:zlib-0:1.2.1.2-1.1.ia64",
          "4Desktop:zlib-0:1.2.1.2-1.1.ppc",
          "4Desktop:zlib-0:1.2.1.2-1.1.ppc64",
          "4Desktop:zlib-0:1.2.1.2-1.1.s390",
          "4Desktop:zlib-0:1.2.1.2-1.1.s390x",
          "4Desktop:zlib-0:1.2.1.2-1.1.src",
          "4Desktop:zlib-0:1.2.1.2-1.1.x86_64",
          "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.i386",
          "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.ia64",
          "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.ppc",
          "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.ppc64",
          "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.s390",
          "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.s390x",
          "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.x86_64",
          "4Desktop:zlib-devel-0:1.2.1.2-1.1.i386",
          "4Desktop:zlib-devel-0:1.2.1.2-1.1.ia64",
          "4Desktop:zlib-devel-0:1.2.1.2-1.1.ppc",
          "4Desktop:zlib-devel-0:1.2.1.2-1.1.ppc64",
          "4Desktop:zlib-devel-0:1.2.1.2-1.1.s390",
          "4Desktop:zlib-devel-0:1.2.1.2-1.1.s390x",
          "4Desktop:zlib-devel-0:1.2.1.2-1.1.x86_64",
          "4ES:zlib-0:1.2.1.2-1.1.i386",
          "4ES:zlib-0:1.2.1.2-1.1.ia64",
          "4ES:zlib-0:1.2.1.2-1.1.ppc",
          "4ES:zlib-0:1.2.1.2-1.1.ppc64",
          "4ES:zlib-0:1.2.1.2-1.1.s390",
          "4ES:zlib-0:1.2.1.2-1.1.s390x",
          "4ES:zlib-0:1.2.1.2-1.1.src",
          "4ES:zlib-0:1.2.1.2-1.1.x86_64",
          "4ES:zlib-debuginfo-0:1.2.1.2-1.1.i386",
          "4ES:zlib-debuginfo-0:1.2.1.2-1.1.ia64",
          "4ES:zlib-debuginfo-0:1.2.1.2-1.1.ppc",
          "4ES:zlib-debuginfo-0:1.2.1.2-1.1.ppc64",
          "4ES:zlib-debuginfo-0:1.2.1.2-1.1.s390",
          "4ES:zlib-debuginfo-0:1.2.1.2-1.1.s390x",
          "4ES:zlib-debuginfo-0:1.2.1.2-1.1.x86_64",
          "4ES:zlib-devel-0:1.2.1.2-1.1.i386",
          "4ES:zlib-devel-0:1.2.1.2-1.1.ia64",
          "4ES:zlib-devel-0:1.2.1.2-1.1.ppc",
          "4ES:zlib-devel-0:1.2.1.2-1.1.ppc64",
          "4ES:zlib-devel-0:1.2.1.2-1.1.s390",
          "4ES:zlib-devel-0:1.2.1.2-1.1.s390x",
          "4ES:zlib-devel-0:1.2.1.2-1.1.x86_64",
          "4WS:zlib-0:1.2.1.2-1.1.i386",
          "4WS:zlib-0:1.2.1.2-1.1.ia64",
          "4WS:zlib-0:1.2.1.2-1.1.ppc",
          "4WS:zlib-0:1.2.1.2-1.1.ppc64",
          "4WS:zlib-0:1.2.1.2-1.1.s390",
          "4WS:zlib-0:1.2.1.2-1.1.s390x",
          "4WS:zlib-0:1.2.1.2-1.1.src",
          "4WS:zlib-0:1.2.1.2-1.1.x86_64",
          "4WS:zlib-debuginfo-0:1.2.1.2-1.1.i386",
          "4WS:zlib-debuginfo-0:1.2.1.2-1.1.ia64",
          "4WS:zlib-debuginfo-0:1.2.1.2-1.1.ppc",
          "4WS:zlib-debuginfo-0:1.2.1.2-1.1.ppc64",
          "4WS:zlib-debuginfo-0:1.2.1.2-1.1.s390",
          "4WS:zlib-debuginfo-0:1.2.1.2-1.1.s390x",
          "4WS:zlib-debuginfo-0:1.2.1.2-1.1.x86_64",
          "4WS:zlib-devel-0:1.2.1.2-1.1.i386",
          "4WS:zlib-devel-0:1.2.1.2-1.1.ia64",
          "4WS:zlib-devel-0:1.2.1.2-1.1.ppc",
          "4WS:zlib-devel-0:1.2.1.2-1.1.ppc64",
          "4WS:zlib-devel-0:1.2.1.2-1.1.s390",
          "4WS:zlib-devel-0:1.2.1.2-1.1.s390x",
          "4WS:zlib-devel-0:1.2.1.2-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2005-2096"
        },
        {
          "category": "external",
          "summary": "RHBZ#430650",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430650"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2005-2096",
          "url": "https://www.cve.org/CVERecord?id=CVE-2005-2096"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-2096",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2096"
        }
      ],
      "release_date": "2005-07-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2005-07-06T14:30:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:zlib-0:1.2.1.2-1.1.i386",
            "4AS:zlib-0:1.2.1.2-1.1.ia64",
            "4AS:zlib-0:1.2.1.2-1.1.ppc",
            "4AS:zlib-0:1.2.1.2-1.1.ppc64",
            "4AS:zlib-0:1.2.1.2-1.1.s390",
            "4AS:zlib-0:1.2.1.2-1.1.s390x",
            "4AS:zlib-0:1.2.1.2-1.1.src",
            "4AS:zlib-0:1.2.1.2-1.1.x86_64",
            "4AS:zlib-debuginfo-0:1.2.1.2-1.1.i386",
            "4AS:zlib-debuginfo-0:1.2.1.2-1.1.ia64",
            "4AS:zlib-debuginfo-0:1.2.1.2-1.1.ppc",
            "4AS:zlib-debuginfo-0:1.2.1.2-1.1.ppc64",
            "4AS:zlib-debuginfo-0:1.2.1.2-1.1.s390",
            "4AS:zlib-debuginfo-0:1.2.1.2-1.1.s390x",
            "4AS:zlib-debuginfo-0:1.2.1.2-1.1.x86_64",
            "4AS:zlib-devel-0:1.2.1.2-1.1.i386",
            "4AS:zlib-devel-0:1.2.1.2-1.1.ia64",
            "4AS:zlib-devel-0:1.2.1.2-1.1.ppc",
            "4AS:zlib-devel-0:1.2.1.2-1.1.ppc64",
            "4AS:zlib-devel-0:1.2.1.2-1.1.s390",
            "4AS:zlib-devel-0:1.2.1.2-1.1.s390x",
            "4AS:zlib-devel-0:1.2.1.2-1.1.x86_64",
            "4Desktop:zlib-0:1.2.1.2-1.1.i386",
            "4Desktop:zlib-0:1.2.1.2-1.1.ia64",
            "4Desktop:zlib-0:1.2.1.2-1.1.ppc",
            "4Desktop:zlib-0:1.2.1.2-1.1.ppc64",
            "4Desktop:zlib-0:1.2.1.2-1.1.s390",
            "4Desktop:zlib-0:1.2.1.2-1.1.s390x",
            "4Desktop:zlib-0:1.2.1.2-1.1.src",
            "4Desktop:zlib-0:1.2.1.2-1.1.x86_64",
            "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.i386",
            "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.ia64",
            "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.ppc",
            "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.ppc64",
            "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.s390",
            "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.s390x",
            "4Desktop:zlib-debuginfo-0:1.2.1.2-1.1.x86_64",
            "4Desktop:zlib-devel-0:1.2.1.2-1.1.i386",
            "4Desktop:zlib-devel-0:1.2.1.2-1.1.ia64",
            "4Desktop:zlib-devel-0:1.2.1.2-1.1.ppc",
            "4Desktop:zlib-devel-0:1.2.1.2-1.1.ppc64",
            "4Desktop:zlib-devel-0:1.2.1.2-1.1.s390",
            "4Desktop:zlib-devel-0:1.2.1.2-1.1.s390x",
            "4Desktop:zlib-devel-0:1.2.1.2-1.1.x86_64",
            "4ES:zlib-0:1.2.1.2-1.1.i386",
            "4ES:zlib-0:1.2.1.2-1.1.ia64",
            "4ES:zlib-0:1.2.1.2-1.1.ppc",
            "4ES:zlib-0:1.2.1.2-1.1.ppc64",
            "4ES:zlib-0:1.2.1.2-1.1.s390",
            "4ES:zlib-0:1.2.1.2-1.1.s390x",
            "4ES:zlib-0:1.2.1.2-1.1.src",
            "4ES:zlib-0:1.2.1.2-1.1.x86_64",
            "4ES:zlib-debuginfo-0:1.2.1.2-1.1.i386",
            "4ES:zlib-debuginfo-0:1.2.1.2-1.1.ia64",
            "4ES:zlib-debuginfo-0:1.2.1.2-1.1.ppc",
            "4ES:zlib-debuginfo-0:1.2.1.2-1.1.ppc64",
            "4ES:zlib-debuginfo-0:1.2.1.2-1.1.s390",
            "4ES:zlib-debuginfo-0:1.2.1.2-1.1.s390x",
            "4ES:zlib-debuginfo-0:1.2.1.2-1.1.x86_64",
            "4ES:zlib-devel-0:1.2.1.2-1.1.i386",
            "4ES:zlib-devel-0:1.2.1.2-1.1.ia64",
            "4ES:zlib-devel-0:1.2.1.2-1.1.ppc",
            "4ES:zlib-devel-0:1.2.1.2-1.1.ppc64",
            "4ES:zlib-devel-0:1.2.1.2-1.1.s390",
            "4ES:zlib-devel-0:1.2.1.2-1.1.s390x",
            "4ES:zlib-devel-0:1.2.1.2-1.1.x86_64",
            "4WS:zlib-0:1.2.1.2-1.1.i386",
            "4WS:zlib-0:1.2.1.2-1.1.ia64",
            "4WS:zlib-0:1.2.1.2-1.1.ppc",
            "4WS:zlib-0:1.2.1.2-1.1.ppc64",
            "4WS:zlib-0:1.2.1.2-1.1.s390",
            "4WS:zlib-0:1.2.1.2-1.1.s390x",
            "4WS:zlib-0:1.2.1.2-1.1.src",
            "4WS:zlib-0:1.2.1.2-1.1.x86_64",
            "4WS:zlib-debuginfo-0:1.2.1.2-1.1.i386",
            "4WS:zlib-debuginfo-0:1.2.1.2-1.1.ia64",
            "4WS:zlib-debuginfo-0:1.2.1.2-1.1.ppc",
            "4WS:zlib-debuginfo-0:1.2.1.2-1.1.ppc64",
            "4WS:zlib-debuginfo-0:1.2.1.2-1.1.s390",
            "4WS:zlib-debuginfo-0:1.2.1.2-1.1.s390x",
            "4WS:zlib-debuginfo-0:1.2.1.2-1.1.x86_64",
            "4WS:zlib-devel-0:1.2.1.2-1.1.i386",
            "4WS:zlib-devel-0:1.2.1.2-1.1.ia64",
            "4WS:zlib-devel-0:1.2.1.2-1.1.ppc",
            "4WS:zlib-devel-0:1.2.1.2-1.1.ppc64",
            "4WS:zlib-devel-0:1.2.1.2-1.1.s390",
            "4WS:zlib-devel-0:1.2.1.2-1.1.s390x",
            "4WS:zlib-devel-0:1.2.1.2-1.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2005:569"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "zlib DoS"
    }
  ]
}

RHSA-2008:0264

Vulnerability from csaf_redhat - Published: 2008-05-20 14:15 - Updated: 2026-01-08 09:21

Summary

Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update

Notes

Topic

Red Hat Network Satellite Server version 5.0.2 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server Solaris client components. This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Details

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Network Satellite Server version 5.0.2 is now available. This\nupdate includes fixes for a number of security issues in Red Hat Network\nSatellite Server Solaris client components.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release corrects several security vulnerabilities in various\ncomponents shipped as part of the Red Hat Network Satellite Server Solaris\nclient. In a typical operating environment, these components are not used\nby the Satellite Server in a vulnerable manner. These security updates will\nreduce risk should these components be used by other applications.\n\nTwo denial-of-service flaws were fixed in ZLib. (CVE-2005-2096,\nCVE-2005-1849)\n\nMultiple flaws were fixed in OpenSSL. (CVE-2006-4343, CVE-2006-4339,\nCVE-2006-3738, CVE-2006-2940, CVE-2006-2937, CVE-2005-2969)\n\nMultiple flaws were fixed in Python. (CVE-2007-4965, CVE-2007-2052,\nCVE-2006-4980, CVE-2006-1542)\n\nUsers of Red Hat Network Satellite Server 5.0.1 are advised to upgrade to\n5.0.2, which resolves these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2008:0264",
        "url": "https://access.redhat.com/errata/RHSA-2008:0264"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "235093",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=235093"
      },
      {
        "category": "external",
        "summary": "295971",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=295971"
      },
      {
        "category": "external",
        "summary": "430640",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430640"
      },
      {
        "category": "external",
        "summary": "430641",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430641"
      },
      {
        "category": "external",
        "summary": "430649",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430649"
      },
      {
        "category": "external",
        "summary": "430651",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430651"
      },
      {
        "category": "external",
        "summary": "430652",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430652"
      },
      {
        "category": "external",
        "summary": "430654",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430654"
      },
      {
        "category": "external",
        "summary": "430655",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430655"
      },
      {
        "category": "external",
        "summary": "430659",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430659"
      },
      {
        "category": "external",
        "summary": "430660",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430660"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0264.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update",
    "tracking": {
      "current_release_date": "2026-01-08T09:21:00+00:00",
      "generator": {
        "date": "2026-01-08T09:21:00+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.14"
        }
      },
      "id": "RHSA-2008:0264",
      "initial_release_date": "2008-05-20T14:15:00+00:00",
      "revision_history": [
        {
          "date": "2008-05-20T14:15:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2008-05-20T10:16:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-01-08T09:21:00+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Satellite 5.0 (RHEL v.4 AS)",
                "product": {
                  "name": "Red Hat Satellite 5.0 (RHEL v.4 AS)",
                  "product_id": "4AS-RHNSAT5",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:network_satellite:5.0:el4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Satellite"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhn-solaris-bootstrap-0:5.0.2-3.noarch",
                "product": {
                  "name": "rhn-solaris-bootstrap-0:5.0.2-3.noarch",
                  "product_id": "rhn-solaris-bootstrap-0:5.0.2-3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rhn-solaris-bootstrap@5.0.2-3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
                "product": {
                  "name": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
                  "product_id": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rhn_solaris_bootstrap_5_0_2_3@1-0?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhn-solaris-bootstrap-0:5.0.2-3.noarch as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)",
          "product_id": "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch"
        },
        "product_reference": "rhn-solaris-bootstrap-0:5.0.2-3.noarch",
        "relates_to_product_reference": "4AS-RHNSAT5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)",
          "product_id": "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        },
        "product_reference": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
        "relates_to_product_reference": "4AS-RHNSAT5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2005-1849",
      "discovery_date": "2006-07-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430649"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "No description is available for this CVE.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "zlib DoS",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2005-1849"
        },
        {
          "category": "external",
          "summary": "RHBZ#430649",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430649"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2005-1849",
          "url": "https://www.cve.org/CVERecord?id=CVE-2005-1849"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-1849",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-1849"
        }
      ],
      "release_date": "2005-08-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-05-20T14:15:00+00:00",
          "details": "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
          "product_ids": [
            "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0264"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "zlib DoS"
    },
    {
      "cve": "CVE-2005-2096",
      "discovery_date": "2006-06-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430650"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "zlib DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2005-2096"
        },
        {
          "category": "external",
          "summary": "RHBZ#430650",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430650"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2005-2096",
          "url": "https://www.cve.org/CVERecord?id=CVE-2005-2096"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-2096",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2096"
        }
      ],
      "release_date": "2005-07-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-05-20T14:15:00+00:00",
          "details": "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
          "product_ids": [
            "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0264"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "zlib DoS"
    },
    {
      "cve": "CVE-2005-2969",
      "discovery_date": "2005-10-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430660"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl mitm downgrade attack",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2005-2969"
        },
        {
          "category": "external",
          "summary": "RHBZ#430660",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430660"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2005-2969",
          "url": "https://www.cve.org/CVERecord?id=CVE-2005-2969"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-2969",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2969"
        }
      ],
      "release_date": "2005-10-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-05-20T14:15:00+00:00",
          "details": "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
          "product_ids": [
            "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0264"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl mitm downgrade attack"
    },
    {
      "cve": "CVE-2006-1542",
      "discovery_date": "2006-03-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430640"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "No description is available for this CVE.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python buffer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\nhttps://access.redhat.com/security/updates/classification/\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-1542"
        },
        {
          "category": "external",
          "summary": "RHBZ#430640",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430640"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-1542",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-1542"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-1542",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-1542"
        }
      ],
      "release_date": "2005-09-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-05-20T14:15:00+00:00",
          "details": "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
          "product_ids": [
            "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0264"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "python buffer overflow"
    },
    {
      "cve": "CVE-2006-2937",
      "discovery_date": "2006-07-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430655"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl ASN.1 DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2937"
        },
        {
          "category": "external",
          "summary": "RHBZ#430655",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430655"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2937",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2937"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2937",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2937"
        }
      ],
      "release_date": "2006-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-05-20T14:15:00+00:00",
          "details": "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
          "product_ids": [
            "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0264"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl ASN.1 DoS"
    },
    {
      "cve": "CVE-2006-2940",
      "discovery_date": "2006-07-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430654"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) \"public exponent\" or (2) \"public modulus\" values in X.509 certificates that require extra time to process when using RSA signature verification.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl public key DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2940"
        },
        {
          "category": "external",
          "summary": "RHBZ#430654",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430654"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2940",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2940"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2940",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2940"
        }
      ],
      "release_date": "2006-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-05-20T14:15:00+00:00",
          "details": "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
          "product_ids": [
            "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0264"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl public key DoS"
    },
    {
      "cve": "CVE-2006-3738",
      "discovery_date": "2006-08-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430652"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl get_shared_ciphers overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3738"
        },
        {
          "category": "external",
          "summary": "RHBZ#430652",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430652"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3738",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3738"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3738",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3738"
        }
      ],
      "release_date": "2006-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-05-20T14:15:00+00:00",
          "details": "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
          "product_ids": [
            "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0264"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "openssl get_shared_ciphers overflow"
    },
    {
      "cve": "CVE-2006-4339",
      "discovery_date": "2006-09-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430659"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying X.509 and other certificates that use PKCS #1.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl signature forgery",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-4339"
        },
        {
          "category": "external",
          "summary": "RHBZ#430659",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430659"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-4339",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-4339"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4339",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4339"
        }
      ],
      "release_date": "2006-09-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-05-20T14:15:00+00:00",
          "details": "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
          "product_ids": [
            "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0264"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "openssl signature forgery"
    },
    {
      "cve": "CVE-2006-4343",
      "discovery_date": "2006-08-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430651"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl sslv2 client code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-4343"
        },
        {
          "category": "external",
          "summary": "RHBZ#430651",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430651"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-4343",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-4343"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4343",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4343"
        }
      ],
      "release_date": "2006-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-05-20T14:15:00+00:00",
          "details": "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
          "product_ids": [
            "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0264"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl sslv2 client code"
    },
    {
      "cve": "CVE-2006-4980",
      "discovery_date": "2006-09-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430641"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python repr unicode buffer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-4980"
        },
        {
          "category": "external",
          "summary": "RHBZ#430641",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430641"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-4980",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-4980"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4980",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4980"
        }
      ],
      "release_date": "2006-08-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-05-20T14:15:00+00:00",
          "details": "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
          "product_ids": [
            "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0264"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python repr unicode buffer overflow"
    },
    {
      "cve": "CVE-2007-2052",
      "cwe": {
        "id": "CWE-193",
        "name": "Off-by-one Error"
      },
      "discovery_date": "2007-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "235093"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python off-by-one locale.strxfrm() (possible memory disclosure)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\nhttps://access.redhat.com/security/updates/classification/",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-2052"
        },
        {
          "category": "external",
          "summary": "RHBZ#235093",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=235093"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-2052",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-2052"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-2052",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-2052"
        }
      ],
      "release_date": "2007-04-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-05-20T14:15:00+00:00",
          "details": "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
          "product_ids": [
            "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0264"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "python off-by-one locale.strxfrm() (possible memory disclosure)"
    },
    {
      "cve": "CVE-2007-4965",
      "discovery_date": "2007-09-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "295971"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "No description is available for this CVE.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python imageop module heap corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=295971\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-4965"
        },
        {
          "category": "external",
          "summary": "RHBZ#295971",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=295971"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-4965",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-4965"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-4965",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-4965"
        }
      ],
      "release_date": "2007-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-05-20T14:15:00+00:00",
          "details": "This update is available via Red Hat Network.  Details on how to use the\nRed Hat Network to apply this update are available at\nhttp://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html",
          "product_ids": [
            "4AS-RHNSAT5:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT5:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0264"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "python imageop module heap corruption"
    }
  ]
}

RHSA-2008:0525

Vulnerability from csaf_redhat - Published: 2008-06-30 15:36 - Updated: 2026-01-08 09:21

Summary

Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update

Notes

Topic

Red Hat Network Satellite Server version 4.2.3 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server Solaris client components. This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Details

This release corrects several security vulnerabilities in various components shipped as part of the Red Hat Network Satellite Server Solaris client. In a typical operating environment, these components are not used by the Satellite Server in a vulnerable manner. These security updates will reduce risk should these components be used by other applications. Several flaws in Zlib was discovered. An attacker could create a carefully-crafted compressed stream that would cause an application to crash if the stream is opened by a user. (CVE-2005-2096). An attacker could create a carefully crafted compressed stream that would cause an application to crash if the stream is opened by a user. (CVE-2005-1849) A buffer overflow was discovered in the OpenSSL SSL_get_shared_ciphers() utility function. An attacker could send a list of ciphers to an application that used this function and overrun a buffer (CVE-2006-3738). A flaw in the SSLv2 client code was discovered. If a client application used OpenSSL to create an SSLv2 connection to a malicious server, that server could cause the client to crash. (CVE-2006-4343) An attack on OpenSSL PKCS #1 v1.5 signatures was discovered. Where an RSA key with exponent 3 is used it may be possible for an attacker to forge a PKCS #1 v1.5 signature that would be incorrectly verified by implementations that do not check for excess data in the RSA exponentiation result of the signature. This issue affected applications that use OpenSSL to verify X.509 certificates as well as other uses of PKCS #1 v1.5. (CVE-2006-4339) OpenSSL contained a software work-around for a bug in SSL handling in Microsoft Internet Explorer version 3.0.2. It is enabled in most servers that use OpenSSL to provide support for SSL and TLS. This work-around could allow an attacker, acting as a "man in the middle" to force an SSL connection to use SSL 2.0 rather than a stronger protocol, such as SSL 3.0 or TLS 1.0. (CVE-2005-2969) During OpenSSL parsing of certain invalid ASN.1 structures an error condition was mishandled. This can result in an infinite loop which consumed system memory (CVE-2006-2937). Certain public key types can take disproportionate amounts of time to process in OpenSSL, leading to a denial of service. (CVE-2006-2940) A flaw was discovered in the way that the Python repr() function handled UTF-32/UCS-4 strings. If an application written in Python used the repr() function on untrusted data, this could lead to a denial of service or possibly allow the execution of arbitrary code with the privileges of the Python application. (CVE-2006-4980) A flaw was discovered in the strxfrm() function of Python's locale module. Strings generated by this function were not properly NULL-terminated. This may possibly cause disclosure of data stored in the memory of a Python application using this function. (CVE-2007-2052) Multiple integer overflow flaws were discovered in Python's imageop module. If an application written in Python used the imageop module to process untrusted images, it could cause the application to crash, enter an infinite loop, or possibly execute arbitrary code with the privileges of the Python interpreter. (CVE-2007-4965) A stack-based buffer overflow was discovered in the Python interpreter, which could allow a local user to gain privileges by running a script with a long name from the current working directory. (CVE-2006-1542) Users of Red Hat Network Satellite Server should upgrade to these updated packages, which contain backported patches to correct these issues.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Network Satellite Server version 4.2.3 is now available. This\nupdate includes fixes for a number of security issues in Red Hat Network\nSatellite Server Solaris client components.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release corrects several security vulnerabilities in various\ncomponents shipped as part of the Red Hat Network Satellite Server Solaris\nclient. In a typical operating environment, these components are not used\nby the Satellite Server in a vulnerable manner. These security updates will\nreduce risk should these components be used by other applications.\n\nSeveral flaws in Zlib was discovered. An attacker could create a\ncarefully-crafted compressed stream that would cause an application to\ncrash if the stream is opened by a user. (CVE-2005-2096).  An attacker\ncould create a carefully crafted compressed stream that would cause an\napplication to crash if the stream is opened by a user. (CVE-2005-1849)\n\nA buffer overflow was discovered in the OpenSSL SSL_get_shared_ciphers()\nutility function. An attacker could send a list of ciphers to an\napplication that used this function and overrun a buffer (CVE-2006-3738).\n\nA flaw in the SSLv2 client code was discovered. If a client application\nused OpenSSL to create an SSLv2 connection to a malicious server, that\nserver could cause the client to crash. (CVE-2006-4343)\n\nAn attack on OpenSSL PKCS #1 v1.5 signatures was discovered. Where an RSA\nkey with exponent 3 is used it may be possible for an attacker to forge a\nPKCS #1 v1.5 signature that would be incorrectly verified by\nimplementations that do not check for excess data in the RSA exponentiation\nresult of the signature. This issue affected applications that use OpenSSL\nto verify X.509 certificates as well as other uses of PKCS #1 v1.5.\n(CVE-2006-4339)\n\nOpenSSL contained a software work-around for a bug in SSL handling in\nMicrosoft Internet Explorer version 3.0.2. It is enabled in most servers\nthat use OpenSSL to provide support for SSL and TLS. This work-around could\nallow an attacker, acting as a \"man in the middle\" to force an SSL\nconnection to use SSL 2.0 rather than a stronger protocol, such as SSL 3.0\nor TLS 1.0. (CVE-2005-2969)\n\nDuring OpenSSL parsing of certain invalid ASN.1 structures an error\ncondition was mishandled. This can result in an infinite loop which\nconsumed system memory (CVE-2006-2937). \n\nCertain public key types can take disproportionate amounts of time to\nprocess in OpenSSL, leading to a denial of service. (CVE-2006-2940)\n\nA flaw was discovered in the way that the Python repr() function handled\nUTF-32/UCS-4 strings. If an application written in Python used the repr()\nfunction on untrusted data, this could lead to a denial of service or\npossibly allow the execution of arbitrary code with the privileges of the\nPython application. (CVE-2006-4980)\n\nA flaw was discovered in the strxfrm() function of Python\u0027s locale module.\nStrings generated by this function were not properly NULL-terminated. This\nmay possibly cause disclosure of data stored in the memory of a Python\napplication using this function. (CVE-2007-2052)\n\nMultiple integer overflow flaws were discovered in Python\u0027s imageop module.\nIf an application written in Python used the imageop module to process\nuntrusted images, it could cause the application to crash, enter an\ninfinite loop, or possibly execute arbitrary code with the privileges of\nthe Python interpreter. (CVE-2007-4965)\n\nA stack-based buffer overflow was discovered in the Python interpreter,\nwhich could allow a local user to gain privileges by running a script with\na long name from the current working directory. (CVE-2006-1542)\n\nUsers of Red Hat Network Satellite Server should upgrade to these updated\npackages, which contain backported patches to correct these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2008:0525",
        "url": "https://access.redhat.com/errata/RHSA-2008:0525"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "235093",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=235093"
      },
      {
        "category": "external",
        "summary": "295971",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=295971"
      },
      {
        "category": "external",
        "summary": "430640",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430640"
      },
      {
        "category": "external",
        "summary": "430641",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430641"
      },
      {
        "category": "external",
        "summary": "430649",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430649"
      },
      {
        "category": "external",
        "summary": "430650",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430650"
      },
      {
        "category": "external",
        "summary": "430651",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430651"
      },
      {
        "category": "external",
        "summary": "430652",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430652"
      },
      {
        "category": "external",
        "summary": "430654",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430654"
      },
      {
        "category": "external",
        "summary": "430655",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430655"
      },
      {
        "category": "external",
        "summary": "430659",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430659"
      },
      {
        "category": "external",
        "summary": "430660",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430660"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0525.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update",
    "tracking": {
      "current_release_date": "2026-01-08T09:21:08+00:00",
      "generator": {
        "date": "2026-01-08T09:21:08+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.14"
        }
      },
      "id": "RHSA-2008:0525",
      "initial_release_date": "2008-06-30T15:36:00+00:00",
      "revision_history": [
        {
          "date": "2008-06-30T15:36:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2008-06-30T11:36:03+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-01-08T09:21:08+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Satellite v 4.2 (RHEL v.3 AS)",
                "product": {
                  "name": "Red Hat Satellite v 4.2 (RHEL v.3 AS)",
                  "product_id": "3AS-RHNSAT4.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:network_satellite:4.2::el3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Satellite v 4.2 (RHEL v.4 AS)",
                "product": {
                  "name": "Red Hat Satellite v 4.2 (RHEL v.4 AS)",
                  "product_id": "4AS-RHNSAT4.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:network_satellite:4.2::el4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Satellite"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhn-solaris-bootstrap-0:5.0.2-3.noarch",
                "product": {
                  "name": "rhn-solaris-bootstrap-0:5.0.2-3.noarch",
                  "product_id": "rhn-solaris-bootstrap-0:5.0.2-3.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rhn-solaris-bootstrap@5.0.2-3?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
                "product": {
                  "name": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
                  "product_id": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rhn_solaris_bootstrap_5_0_2_3@1-0?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhn-solaris-bootstrap-0:5.0.2-3.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)",
          "product_id": "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch"
        },
        "product_reference": "rhn-solaris-bootstrap-0:5.0.2-3.noarch",
        "relates_to_product_reference": "3AS-RHNSAT4.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)",
          "product_id": "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        },
        "product_reference": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
        "relates_to_product_reference": "3AS-RHNSAT4.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhn-solaris-bootstrap-0:5.0.2-3.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)",
          "product_id": "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch"
        },
        "product_reference": "rhn-solaris-bootstrap-0:5.0.2-3.noarch",
        "relates_to_product_reference": "4AS-RHNSAT4.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)",
          "product_id": "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        },
        "product_reference": "rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
        "relates_to_product_reference": "4AS-RHNSAT4.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2005-1849",
      "discovery_date": "2006-07-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430649"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "No description is available for this CVE.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "zlib DoS",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
          "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2005-1849"
        },
        {
          "category": "external",
          "summary": "RHBZ#430649",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430649"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2005-1849",
          "url": "https://www.cve.org/CVERecord?id=CVE-2005-1849"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-1849",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-1849"
        }
      ],
      "release_date": "2005-08-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:36:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
            "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0525"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "zlib DoS"
    },
    {
      "cve": "CVE-2005-2096",
      "discovery_date": "2006-06-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430650"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "zlib DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
          "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2005-2096"
        },
        {
          "category": "external",
          "summary": "RHBZ#430650",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430650"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2005-2096",
          "url": "https://www.cve.org/CVERecord?id=CVE-2005-2096"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-2096",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2096"
        }
      ],
      "release_date": "2005-07-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:36:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
            "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0525"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "zlib DoS"
    },
    {
      "cve": "CVE-2005-2969",
      "discovery_date": "2005-10-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430660"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl mitm downgrade attack",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
          "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2005-2969"
        },
        {
          "category": "external",
          "summary": "RHBZ#430660",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430660"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2005-2969",
          "url": "https://www.cve.org/CVERecord?id=CVE-2005-2969"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-2969",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2969"
        }
      ],
      "release_date": "2005-10-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:36:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
            "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0525"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl mitm downgrade attack"
    },
    {
      "cve": "CVE-2006-1542",
      "discovery_date": "2006-03-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430640"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "No description is available for this CVE.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python buffer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\nhttps://access.redhat.com/security/updates/classification/\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
          "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-1542"
        },
        {
          "category": "external",
          "summary": "RHBZ#430640",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430640"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-1542",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-1542"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-1542",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-1542"
        }
      ],
      "release_date": "2005-09-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:36:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
            "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0525"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "python buffer overflow"
    },
    {
      "cve": "CVE-2006-2937",
      "discovery_date": "2006-07-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430655"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl ASN.1 DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
          "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2937"
        },
        {
          "category": "external",
          "summary": "RHBZ#430655",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430655"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2937",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2937"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2937",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2937"
        }
      ],
      "release_date": "2006-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:36:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
            "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0525"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl ASN.1 DoS"
    },
    {
      "cve": "CVE-2006-2940",
      "discovery_date": "2006-07-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430654"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) \"public exponent\" or (2) \"public modulus\" values in X.509 certificates that require extra time to process when using RSA signature verification.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl public key DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
          "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2940"
        },
        {
          "category": "external",
          "summary": "RHBZ#430654",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430654"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2940",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2940"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2940",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2940"
        }
      ],
      "release_date": "2006-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:36:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
            "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0525"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl public key DoS"
    },
    {
      "cve": "CVE-2006-3738",
      "discovery_date": "2006-08-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430652"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl get_shared_ciphers overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
          "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3738"
        },
        {
          "category": "external",
          "summary": "RHBZ#430652",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430652"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3738",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3738"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3738",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3738"
        }
      ],
      "release_date": "2006-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:36:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
            "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0525"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "openssl get_shared_ciphers overflow"
    },
    {
      "cve": "CVE-2006-4339",
      "discovery_date": "2006-09-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430659"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying X.509 and other certificates that use PKCS #1.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl signature forgery",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
          "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-4339"
        },
        {
          "category": "external",
          "summary": "RHBZ#430659",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430659"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-4339",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-4339"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4339",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4339"
        }
      ],
      "release_date": "2006-09-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:36:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
            "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0525"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "openssl signature forgery"
    },
    {
      "cve": "CVE-2006-4343",
      "discovery_date": "2006-08-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430651"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl sslv2 client code",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
          "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-4343"
        },
        {
          "category": "external",
          "summary": "RHBZ#430651",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430651"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-4343",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-4343"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4343",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4343"
        }
      ],
      "release_date": "2006-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:36:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
            "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0525"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl sslv2 client code"
    },
    {
      "cve": "CVE-2006-4980",
      "discovery_date": "2006-09-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "430641"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python repr unicode buffer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
          "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-4980"
        },
        {
          "category": "external",
          "summary": "RHBZ#430641",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=430641"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-4980",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-4980"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-4980",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-4980"
        }
      ],
      "release_date": "2006-08-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:36:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
            "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0525"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python repr unicode buffer overflow"
    },
    {
      "cve": "CVE-2007-2052",
      "cwe": {
        "id": "CWE-193",
        "name": "Off-by-one Error"
      },
      "discovery_date": "2007-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "235093"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python off-by-one locale.strxfrm() (possible memory disclosure)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\nhttps://access.redhat.com/security/updates/classification/",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
          "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-2052"
        },
        {
          "category": "external",
          "summary": "RHBZ#235093",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=235093"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-2052",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-2052"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-2052",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-2052"
        }
      ],
      "release_date": "2007-04-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:36:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
            "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0525"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "python off-by-one locale.strxfrm() (possible memory disclosure)"
    },
    {
      "cve": "CVE-2007-4965",
      "discovery_date": "2007-09-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "295971"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "No description is available for this CVE.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python imageop module heap corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=295971\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: https://access.redhat.com/security/updates/classification/",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
          "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
          "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-4965"
        },
        {
          "category": "external",
          "summary": "RHBZ#295971",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=295971"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-4965",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-4965"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-4965",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-4965"
        }
      ],
      "release_date": "2007-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-06-30T15:36:00+00:00",
          "details": "Before applying this update, make sure that all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use the Red\nHat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "3AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "3AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch",
            "4AS-RHNSAT4.2:rhn-solaris-bootstrap-0:5.0.2-3.noarch",
            "4AS-RHNSAT4.2:rhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0525"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "python imageop module heap corruption"
    }
  ]
}

FKIE_CVE-2005-2096

Vulnerability from fkie_nvd - Published: 2005-07-06 04:00 - Updated: 2025-04-03 01:03

Severity ?

Summary

References

URL	Tags
secalert@redhat.com	ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:16.zlib.asc
secalert@redhat.com	ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt
secalert@redhat.com	http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html
secalert@redhat.com	http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html	Vendor Advisory
secalert@redhat.com	http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
secalert@redhat.com	http://secunia.com/advisories/15949	Patch, Vendor Advisory
secalert@redhat.com	http://secunia.com/advisories/17054
secalert@redhat.com	http://secunia.com/advisories/17225
secalert@redhat.com	http://secunia.com/advisories/17236
secalert@redhat.com	http://secunia.com/advisories/17326
secalert@redhat.com	http://secunia.com/advisories/17516
secalert@redhat.com	http://secunia.com/advisories/18377
secalert@redhat.com	http://secunia.com/advisories/18406
secalert@redhat.com	http://secunia.com/advisories/18507
secalert@redhat.com	http://secunia.com/advisories/19550
secalert@redhat.com	http://secunia.com/advisories/19597
secalert@redhat.com	http://secunia.com/advisories/24788
secalert@redhat.com	http://secunia.com/advisories/31492
secalert@redhat.com	http://secunia.com/advisories/32706
secalert@redhat.com	http://security.gentoo.org/glsa/glsa-200507-05.xml	Patch, Vendor Advisory
secalert@redhat.com	http://securitytracker.com/id?1014398	Vendor Advisory
secalert@redhat.com	http://sunsolve.sun.com/search/document.do?assetkey=1-26-101989-1	Patch, Vendor Advisory
secalert@redhat.com	http://support.apple.com/kb/HT3298
secalert@redhat.com	http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm
secalert@redhat.com	http://www.debian.org/security/2005/dsa-740	Patch, Vendor Advisory
secalert@redhat.com	http://www.debian.org/security/2005/dsa-797	Patch, Vendor Advisory
secalert@redhat.com	http://www.debian.org/security/2006/dsa-1026
secalert@redhat.com	http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml	Patch, Vendor Advisory
secalert@redhat.com	http://www.kb.cert.org/vuls/id/680620	Third Party Advisory, US Government Resource
secalert@redhat.com	http://www.mandriva.com/security/advisories?name=MDKSA-2005:112
secalert@redhat.com	http://www.mandriva.com/security/advisories?name=MDKSA-2005:196
secalert@redhat.com	http://www.mandriva.com/security/advisories?name=MDKSA-2006:070
secalert@redhat.com	http://www.redhat.com/support/errata/RHSA-2005-569.html	Patch, Vendor Advisory
secalert@redhat.com	http://www.redhat.com/support/errata/RHSA-2008-0629.html
secalert@redhat.com	http://www.securityfocus.com/archive/1/421411/100/0/threaded
secalert@redhat.com	http://www.securityfocus.com/archive/1/464745/100/0/threaded
secalert@redhat.com	http://www.securityfocus.com/archive/1/482503/100/0/threaded
secalert@redhat.com	http://www.securityfocus.com/archive/1/482505/100/0/threaded
secalert@redhat.com	http://www.securityfocus.com/archive/1/482571/100/0/threaded
secalert@redhat.com	http://www.securityfocus.com/archive/1/482601/100/0/threaded
secalert@redhat.com	http://www.securityfocus.com/archive/1/482949/100/0/threaded
secalert@redhat.com	http://www.securityfocus.com/archive/1/482950/100/0/threaded
secalert@redhat.com	http://www.securityfocus.com/bid/14162	Patch
secalert@redhat.com	http://www.ubuntulinux.org/usn/usn-151-3
secalert@redhat.com	http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html
secalert@redhat.com	http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html
secalert@redhat.com	http://www.vupen.com/english/advisories/2005/0978
secalert@redhat.com	http://www.vupen.com/english/advisories/2006/0144
secalert@redhat.com	http://www.vupen.com/english/advisories/2007/1267
secalert@redhat.com	https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162391	Vendor Advisory
secalert@redhat.com	https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680	Vendor Advisory
secalert@redhat.com	https://exchange.xforce.ibmcloud.com/vulnerabilities/24064
secalert@redhat.com	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11500
secalert@redhat.com	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1262
secalert@redhat.com	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1542
secalert@redhat.com	https://usn.ubuntu.com/148-1/
af854a3a-2127-422b-91ae-364da2661108	ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:16.zlib.asc
af854a3a-2127-422b-91ae-364da2661108	ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt
af854a3a-2127-422b-91ae-364da2661108	http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html
af854a3a-2127-422b-91ae-364da2661108	http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/15949	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17054
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17225
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17236
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17326
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17516
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/18377
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/18406
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/18507
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19550
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19597
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24788
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/31492
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/32706
af854a3a-2127-422b-91ae-364da2661108	http://security.gentoo.org/glsa/glsa-200507-05.xml	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://securitytracker.com/id?1014398	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://sunsolve.sun.com/search/document.do?assetkey=1-26-101989-1	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://support.apple.com/kb/HT3298
af854a3a-2127-422b-91ae-364da2661108	http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2005/dsa-740	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2005/dsa-797	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2006/dsa-1026
af854a3a-2127-422b-91ae-364da2661108	http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.kb.cert.org/vuls/id/680620	Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDKSA-2005:112
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDKSA-2005:196
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDKSA-2006:070
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2005-569.html	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2008-0629.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/421411/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/464745/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/482503/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/482505/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/482571/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/482601/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/482949/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/482950/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/14162	Patch
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntulinux.org/usn/usn-151-3
af854a3a-2127-422b-91ae-364da2661108	http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html
af854a3a-2127-422b-91ae-364da2661108	http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2005/0978
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2006/0144
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2007/1267
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162391	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/24064
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11500
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1262
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1542
af854a3a-2127-422b-91ae-364da2661108	https://usn.ubuntu.com/148-1/

Impacted products

Vendor	Product	Version
zlib	zlib	1.2.0
zlib	zlib	1.2.1
zlib	zlib	1.2.2

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:zlib:zlib:1.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "9E8D0212-4805-4C50-A8C7-7A2AF3424929",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:zlib:zlib:1.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4C493104-5D6B-417F-BD77-32A4868A3398",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:zlib:zlib:1.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "6C77C974-9A8A-4F22-A680-5095552589BB",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file."
    }
  ],
  "id": "CVE-2005-2096",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2005-07-06T04:00:00.000",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:16.zlib.asc"
    },
    {
      "source": "secalert@redhat.com",
      "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/15949"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/17054"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/17225"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/17236"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/17326"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/17516"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/18377"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/18406"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/18507"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/19550"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/19597"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/24788"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/31492"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/32706"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://security.gentoo.org/glsa/glsa-200507-05.xml"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://securitytracker.com/id?1014398"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101989-1"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://support.apple.com/kb/HT3298"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.debian.org/security/2005/dsa-740"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.debian.org/security/2005/dsa-797"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.debian.org/security/2006/dsa-1026"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/680620"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:112"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:196"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:070"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2005-569.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0629.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/421411/100/0/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/464745/100/0/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/482503/100/0/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/482505/100/0/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/482571/100/0/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/482601/100/0/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/482949/100/0/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/482950/100/0/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/14162"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.ubuntulinux.org/usn/usn-151-3"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vupen.com/english/advisories/2005/0978"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vupen.com/english/advisories/2006/0144"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vupen.com/english/advisories/2007/1267"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162391"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24064"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11500"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1262"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1542"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://usn.ubuntu.com/148-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:16.zlib.asc"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/15949"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/17054"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/17225"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/17236"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/17326"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/17516"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/18377"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/18406"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/18507"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19550"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19597"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24788"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/31492"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/32706"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://security.gentoo.org/glsa/glsa-200507-05.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://securitytracker.com/id?1014398"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101989-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.apple.com/kb/HT3298"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.debian.org/security/2005/dsa-740"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.debian.org/security/2005/dsa-797"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2006/dsa-1026"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/680620"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:112"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:196"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:070"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2005-569.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0629.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/421411/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/464745/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/482503/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/482505/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/482571/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/482601/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/482949/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/482950/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/14162"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntulinux.org/usn/usn-151-3"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2005/0978"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/0144"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/1267"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162391"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24064"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11500"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1262"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1542"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://usn.ubuntu.com/148-1/"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vendorComments": [
    {
      "comment": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
      "lastModified": "2007-03-14T00:00:00",
      "organization": "Red Hat"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

OPENSUSE-SU-2024:10580-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00

Summary

httrack-3.48.22-1.3 on GA media

Notes

Title of the patch

httrack-3.48.22-1.3 on GA media

Description of the patch

These are all security issues fixed in the httrack-3.48.22-1.3 package on the GA media of openSUSE Tumbleweed.

Patchnames

openSUSE-Tumbleweed-2024-10580

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "httrack-3.48.22-1.3 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the httrack-3.48.22-1.3 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-10580",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10580-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2004-0797 page",
        "url": "https://www.suse.com/security/cve/CVE-2004-0797/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2005-2096 page",
        "url": "https://www.suse.com/security/cve/CVE-2005-2096/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2010-5252 page",
        "url": "https://www.suse.com/security/cve/CVE-2010-5252/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-0160 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-0160/"
      }
    ],
    "title": "httrack-3.48.22-1.3 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:10580-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httrack-3.48.22-1.3.aarch64",
                "product": {
                  "name": "httrack-3.48.22-1.3.aarch64",
                  "product_id": "httrack-3.48.22-1.3.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "httrack-devel-3.48.22-1.3.aarch64",
                "product": {
                  "name": "httrack-devel-3.48.22-1.3.aarch64",
                  "product_id": "httrack-devel-3.48.22-1.3.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libhttrack2-3.48.22-1.3.aarch64",
                "product": {
                  "name": "libhttrack2-3.48.22-1.3.aarch64",
                  "product_id": "libhttrack2-3.48.22-1.3.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httrack-3.48.22-1.3.ppc64le",
                "product": {
                  "name": "httrack-3.48.22-1.3.ppc64le",
                  "product_id": "httrack-3.48.22-1.3.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "httrack-devel-3.48.22-1.3.ppc64le",
                "product": {
                  "name": "httrack-devel-3.48.22-1.3.ppc64le",
                  "product_id": "httrack-devel-3.48.22-1.3.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libhttrack2-3.48.22-1.3.ppc64le",
                "product": {
                  "name": "libhttrack2-3.48.22-1.3.ppc64le",
                  "product_id": "libhttrack2-3.48.22-1.3.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httrack-3.48.22-1.3.s390x",
                "product": {
                  "name": "httrack-3.48.22-1.3.s390x",
                  "product_id": "httrack-3.48.22-1.3.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "httrack-devel-3.48.22-1.3.s390x",
                "product": {
                  "name": "httrack-devel-3.48.22-1.3.s390x",
                  "product_id": "httrack-devel-3.48.22-1.3.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libhttrack2-3.48.22-1.3.s390x",
                "product": {
                  "name": "libhttrack2-3.48.22-1.3.s390x",
                  "product_id": "libhttrack2-3.48.22-1.3.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httrack-3.48.22-1.3.x86_64",
                "product": {
                  "name": "httrack-3.48.22-1.3.x86_64",
                  "product_id": "httrack-3.48.22-1.3.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "httrack-devel-3.48.22-1.3.x86_64",
                "product": {
                  "name": "httrack-devel-3.48.22-1.3.x86_64",
                  "product_id": "httrack-devel-3.48.22-1.3.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libhttrack2-3.48.22-1.3.x86_64",
                "product": {
                  "name": "libhttrack2-3.48.22-1.3.x86_64",
                  "product_id": "libhttrack2-3.48.22-1.3.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httrack-3.48.22-1.3.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:httrack-3.48.22-1.3.aarch64"
        },
        "product_reference": "httrack-3.48.22-1.3.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httrack-3.48.22-1.3.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:httrack-3.48.22-1.3.ppc64le"
        },
        "product_reference": "httrack-3.48.22-1.3.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httrack-3.48.22-1.3.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:httrack-3.48.22-1.3.s390x"
        },
        "product_reference": "httrack-3.48.22-1.3.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httrack-3.48.22-1.3.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:httrack-3.48.22-1.3.x86_64"
        },
        "product_reference": "httrack-3.48.22-1.3.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httrack-devel-3.48.22-1.3.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.aarch64"
        },
        "product_reference": "httrack-devel-3.48.22-1.3.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httrack-devel-3.48.22-1.3.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.ppc64le"
        },
        "product_reference": "httrack-devel-3.48.22-1.3.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httrack-devel-3.48.22-1.3.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.s390x"
        },
        "product_reference": "httrack-devel-3.48.22-1.3.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httrack-devel-3.48.22-1.3.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.x86_64"
        },
        "product_reference": "httrack-devel-3.48.22-1.3.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libhttrack2-3.48.22-1.3.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.aarch64"
        },
        "product_reference": "libhttrack2-3.48.22-1.3.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libhttrack2-3.48.22-1.3.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.ppc64le"
        },
        "product_reference": "libhttrack2-3.48.22-1.3.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libhttrack2-3.48.22-1.3.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.s390x"
        },
        "product_reference": "libhttrack2-3.48.22-1.3.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libhttrack2-3.48.22-1.3.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.x86_64"
        },
        "product_reference": "libhttrack2-3.48.22-1.3.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2004-0797",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2004-0797"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The error handling in the (1) inflate and (2) inflateBack functions in ZLib compression library 1.2.x allows local users to cause a denial of service (application crash).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:httrack-3.48.22-1.3.aarch64",
          "openSUSE Tumbleweed:httrack-3.48.22-1.3.ppc64le",
          "openSUSE Tumbleweed:httrack-3.48.22-1.3.s390x",
          "openSUSE Tumbleweed:httrack-3.48.22-1.3.x86_64",
          "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.aarch64",
          "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.ppc64le",
          "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.s390x",
          "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.x86_64",
          "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.aarch64",
          "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.ppc64le",
          "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.s390x",
          "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2004-0797",
          "url": "https://www.suse.com/security/cve/CVE-2004-0797"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 59087 for CVE-2004-0797",
          "url": "https://bugzilla.suse.com/59087"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.aarch64",
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.ppc64le",
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.s390x",
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.x86_64",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.aarch64",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.ppc64le",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.s390x",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.x86_64",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.aarch64",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.ppc64le",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.s390x",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2004-0797"
    },
    {
      "cve": "CVE-2005-2096",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2005-2096"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:httrack-3.48.22-1.3.aarch64",
          "openSUSE Tumbleweed:httrack-3.48.22-1.3.ppc64le",
          "openSUSE Tumbleweed:httrack-3.48.22-1.3.s390x",
          "openSUSE Tumbleweed:httrack-3.48.22-1.3.x86_64",
          "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.aarch64",
          "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.ppc64le",
          "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.s390x",
          "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.x86_64",
          "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.aarch64",
          "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.ppc64le",
          "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.s390x",
          "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2005-2096",
          "url": "https://www.suse.com/security/cve/CVE-2005-2096"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 131538 for CVE-2005-2096",
          "url": "https://bugzilla.suse.com/131538"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 436137 for CVE-2005-2096",
          "url": "https://bugzilla.suse.com/436137"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 94926 for CVE-2005-2096",
          "url": "https://bugzilla.suse.com/94926"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 95512 for CVE-2005-2096",
          "url": "https://bugzilla.suse.com/95512"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.aarch64",
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.ppc64le",
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.s390x",
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.x86_64",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.aarch64",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.ppc64le",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.s390x",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.x86_64",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.aarch64",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.ppc64le",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.s390x",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2005-2096"
    },
    {
      "cve": "CVE-2010-5252",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2010-5252"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Untrusted search path vulnerability in HTTrack 3.43-9 allows local users to gain privileges via a Trojan horse httrack-plugin.dll file in the current working directory, as demonstrated by a directory that contains a .whtt file.  NOTE: some of these details are obtained from third party information.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:httrack-3.48.22-1.3.aarch64",
          "openSUSE Tumbleweed:httrack-3.48.22-1.3.ppc64le",
          "openSUSE Tumbleweed:httrack-3.48.22-1.3.s390x",
          "openSUSE Tumbleweed:httrack-3.48.22-1.3.x86_64",
          "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.aarch64",
          "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.ppc64le",
          "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.s390x",
          "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.x86_64",
          "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.aarch64",
          "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.ppc64le",
          "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.s390x",
          "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2010-5252",
          "url": "https://www.suse.com/security/cve/CVE-2010-5252"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.aarch64",
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.ppc64le",
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.s390x",
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.x86_64",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.aarch64",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.ppc64le",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.s390x",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.x86_64",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.aarch64",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.ppc64le",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.s390x",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2010-5252"
    },
    {
      "cve": "CVE-2014-0160",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-0160"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:httrack-3.48.22-1.3.aarch64",
          "openSUSE Tumbleweed:httrack-3.48.22-1.3.ppc64le",
          "openSUSE Tumbleweed:httrack-3.48.22-1.3.s390x",
          "openSUSE Tumbleweed:httrack-3.48.22-1.3.x86_64",
          "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.aarch64",
          "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.ppc64le",
          "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.s390x",
          "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.x86_64",
          "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.aarch64",
          "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.ppc64le",
          "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.s390x",
          "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-0160",
          "url": "https://www.suse.com/security/cve/CVE-2014-0160"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 872299 for CVE-2014-0160",
          "url": "https://bugzilla.suse.com/872299"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.aarch64",
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.ppc64le",
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.s390x",
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.x86_64",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.aarch64",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.ppc64le",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.s390x",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.x86_64",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.aarch64",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.ppc64le",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.s390x",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.aarch64",
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.ppc64le",
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.s390x",
            "openSUSE Tumbleweed:httrack-3.48.22-1.3.x86_64",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.aarch64",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.ppc64le",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.s390x",
            "openSUSE Tumbleweed:httrack-devel-3.48.22-1.3.x86_64",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.aarch64",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.ppc64le",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.s390x",
            "openSUSE Tumbleweed:libhttrack2-3.48.22-1.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2014-0160"
    }
  ]
}

JVNDB-2015-000066

Vulnerability from jvndb - Published: 2015-05-19 13:40 - Updated:2015-05-22 14:26

Severity ?

() - -

Summary

BGA32.DLL and QBga32.DLL contain multiple vulnerabilities

Details

BGA32.DLL is a compression/decompression library for gza and bza-format files. BGA32.DLL contains multiple vulnerabilities (including a buffer overflow) because it utilizes vulnerable zlib and bzip2 libraries. QBga32.DLL, which is a wrapper of BGA32.DLL, is also affected. KONDOU, Kazuhiro reported this vulnerability to IPA. JPCERT/CC coordinated with the developers under Information Security Early Warning Partnership.

References

Type

URL

	JVN	http://jvn.jp/en/jp/JVN78689801/index.html
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0107
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0953
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1260
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1849
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2096
	NVD	https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2003-0107
	NVD	https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-0953
	NVD	https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-1260
	NVD	https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-1849
	NVD	https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-2096
	No Mapping(CWE-Other)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

Vendor

Product

	Kazuhiro Inaba	QBga32.DLL
	Toshinobu Kimura	BGA32.DLL

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000066.html",
  "dc:date": "2015-05-22T14:26+09:00",
  "dcterms:issued": "2015-05-19T13:40+09:00",
  "dcterms:modified": "2015-05-22T14:26+09:00",
  "description": "BGA32.DLL is a compression/decompression library for gza and bza-format files. BGA32.DLL contains multiple vulnerabilities (including a buffer overflow) because it utilizes vulnerable zlib and bzip2 libraries.\r\nQBga32.DLL, which is a wrapper of BGA32.DLL, is also affected.\r\n\r\nKONDOU, Kazuhiro reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developers under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000066.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:misc:kazuhiro_inaba_qbga32.dll",
      "@product": "QBga32.DLL",
      "@vendor": "Kazuhiro Inaba",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:misc:toshinobu_kimura_bga32.dll",
      "@product": "BGA32.DLL",
      "@vendor": "Toshinobu Kimura",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "6.8",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2015-000066",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN78689801/index.html",
      "@id": "JVN#78689801",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0107",
      "@id": "CVE-2003-0107",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0953",
      "@id": "CVE-2005-0953",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1260",
      "@id": "CVE-2005-1260",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1849",
      "@id": "CVE-2005-1849",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2096",
      "@id": "CVE-2005-2096",
      "@source": "CVE"
    },
    {
      "#text": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2003-0107",
      "@id": "CVE-2003-0107",
      "@source": "NVD"
    },
    {
      "#text": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-0953",
      "@id": "CVE-2005-0953",
      "@source": "NVD"
    },
    {
      "#text": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-1260",
      "@id": "CVE-2005-1260",
      "@source": "NVD"
    },
    {
      "#text": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-1849",
      "@id": "CVE-2005-1849",
      "@source": "NVD"
    },
    {
      "#text": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-2096",
      "@id": "CVE-2005-2096",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "BGA32.DLL and QBga32.DLL contain multiple vulnerabilities"
}

CERTA-2008-AVI-557

Vulnerability from certfr_avis - Published: 2008-11-14 - Updated: 2008-11-14

Plusieurs vulnérabilités affectent le navigateur Safari. Leur exploitation permet d'accéder à des données sensibles ou d'exécuter du code arbitraire à distance sur le système vulnérable.

Description

Plusieurs vulnérabilités affectent le traitement des images, en particulier au format PNG, TIFF ou JPEG. L'exploitation de chacune d'entre elles permet d'exécuter du code arbitraire à distance.

Une vulnérabilité dans le traitement des feuilles de style est utilisable de manière malveillante pour exécuter du code arbitraire à distance.

Une vulnérabilité dans le traitement des javascripts est utilisable de manière malveillante pour exécuter du code arbitraire à distance.

Une erreur dans Webkit et une erreur dans la gestion des formulaires permettent à un utilisateur malveillant d'accéder à des données sensibles.

Solution

La version 3.2 remédie à ces vulnérabilités.

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Safari 3.x.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

GSD-2005-2096

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

Aliases

CVE-2005-2096

Aliases

CVE-2005-2096

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2005-2096",
    "description": "zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.",
    "id": "GSD-2005-2096",
    "references": [
      "https://www.suse.com/security/cve/CVE-2005-2096.html",
      "https://www.debian.org/security/2006/dsa-1026",
      "https://www.debian.org/security/2005/dsa-797",
      "https://www.debian.org/security/2005/dsa-740",
      "https://access.redhat.com/errata/RHSA-2008:0629",
      "https://access.redhat.com/errata/RHSA-2008:0525",
      "https://access.redhat.com/errata/RHSA-2008:0264",
      "https://access.redhat.com/errata/RHSA-2005:569"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2005-2096"
      ],
      "details": "zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.",
      "id": "GSD-2005-2096",
      "modified": "2023-12-13T01:20:10.162630Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2005-2096",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
            "refsource": "MISC",
            "url": "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html"
          },
          {
            "name": "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
            "refsource": "MISC",
            "url": "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html"
          },
          {
            "name": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:16.zlib.asc",
            "refsource": "MISC",
            "url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:16.zlib.asc"
          },
          {
            "name": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt",
            "refsource": "MISC",
            "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt"
          },
          {
            "name": "http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html",
            "refsource": "MISC",
            "url": "http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html"
          },
          {
            "name": "http://secunia.com/advisories/15949",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/15949"
          },
          {
            "name": "http://secunia.com/advisories/17054",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/17054"
          },
          {
            "name": "http://secunia.com/advisories/17225",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/17225"
          },
          {
            "name": "http://secunia.com/advisories/17236",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/17236"
          },
          {
            "name": "http://secunia.com/advisories/17326",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/17326"
          },
          {
            "name": "http://secunia.com/advisories/17516",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/17516"
          },
          {
            "name": "http://secunia.com/advisories/18377",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/18377"
          },
          {
            "name": "http://secunia.com/advisories/18406",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/18406"
          },
          {
            "name": "http://secunia.com/advisories/18507",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/18507"
          },
          {
            "name": "http://secunia.com/advisories/19550",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/19550"
          },
          {
            "name": "http://secunia.com/advisories/19597",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/19597"
          },
          {
            "name": "http://secunia.com/advisories/24788",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/24788"
          },
          {
            "name": "http://secunia.com/advisories/31492",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/31492"
          },
          {
            "name": "http://secunia.com/advisories/32706",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/32706"
          },
          {
            "name": "http://security.gentoo.org/glsa/glsa-200507-05.xml",
            "refsource": "MISC",
            "url": "http://security.gentoo.org/glsa/glsa-200507-05.xml"
          },
          {
            "name": "http://securitytracker.com/id?1014398",
            "refsource": "MISC",
            "url": "http://securitytracker.com/id?1014398"
          },
          {
            "name": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101989-1",
            "refsource": "MISC",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101989-1"
          },
          {
            "name": "http://support.apple.com/kb/HT3298",
            "refsource": "MISC",
            "url": "http://support.apple.com/kb/HT3298"
          },
          {
            "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm",
            "refsource": "MISC",
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm"
          },
          {
            "name": "http://www.debian.org/security/2005/dsa-740",
            "refsource": "MISC",
            "url": "http://www.debian.org/security/2005/dsa-740"
          },
          {
            "name": "http://www.debian.org/security/2005/dsa-797",
            "refsource": "MISC",
            "url": "http://www.debian.org/security/2005/dsa-797"
          },
          {
            "name": "http://www.debian.org/security/2006/dsa-1026",
            "refsource": "MISC",
            "url": "http://www.debian.org/security/2006/dsa-1026"
          },
          {
            "name": "http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml",
            "refsource": "MISC",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml"
          },
          {
            "name": "http://www.kb.cert.org/vuls/id/680620",
            "refsource": "MISC",
            "url": "http://www.kb.cert.org/vuls/id/680620"
          },
          {
            "name": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:112",
            "refsource": "MISC",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:112"
          },
          {
            "name": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:196",
            "refsource": "MISC",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:196"
          },
          {
            "name": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:070",
            "refsource": "MISC",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:070"
          },
          {
            "name": "http://www.redhat.com/support/errata/RHSA-2005-569.html",
            "refsource": "MISC",
            "url": "http://www.redhat.com/support/errata/RHSA-2005-569.html"
          },
          {
            "name": "http://www.redhat.com/support/errata/RHSA-2008-0629.html",
            "refsource": "MISC",
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0629.html"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/421411/100/0/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/421411/100/0/threaded"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/464745/100/0/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/464745/100/0/threaded"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/482503/100/0/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/482503/100/0/threaded"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/482505/100/0/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/482505/100/0/threaded"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/482571/100/0/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/482571/100/0/threaded"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/482601/100/0/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/482601/100/0/threaded"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/482949/100/0/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/482949/100/0/threaded"
          },
          {
            "name": "http://www.securityfocus.com/archive/1/482950/100/0/threaded",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/archive/1/482950/100/0/threaded"
          },
          {
            "name": "http://www.securityfocus.com/bid/14162",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/bid/14162"
          },
          {
            "name": "http://www.ubuntulinux.org/usn/usn-151-3",
            "refsource": "MISC",
            "url": "http://www.ubuntulinux.org/usn/usn-151-3"
          },
          {
            "name": "http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html",
            "refsource": "MISC",
            "url": "http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html"
          },
          {
            "name": "http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html",
            "refsource": "MISC",
            "url": "http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2005/0978",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2005/0978"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2006/0144",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2006/0144"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2007/1267",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2007/1267"
          },
          {
            "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162391",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162391"
          },
          {
            "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680"
          },
          {
            "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24064",
            "refsource": "MISC",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24064"
          },
          {
            "name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11500",
            "refsource": "MISC",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11500"
          },
          {
            "name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1262",
            "refsource": "MISC",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1262"
          },
          {
            "name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1542",
            "refsource": "MISC",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1542"
          },
          {
            "name": "https://usn.ubuntu.com/148-1/",
            "refsource": "MISC",
            "url": "https://usn.ubuntu.com/148-1/"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:zlib:zlib:1.2.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:zlib:zlib:1.2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:zlib:zlib:1.2.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2005-2096"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-740",
              "refsource": "DEBIAN",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.debian.org/security/2005/dsa-740"
            },
            {
              "name": "RHSA-2005:569",
              "refsource": "REDHAT",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2005-569.html"
            },
            {
              "name": "GLSA-200507-05",
              "refsource": "GENTOO",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://security.gentoo.org/glsa/glsa-200507-05.xml"
            },
            {
              "name": "14162",
              "refsource": "BID",
              "tags": [
                "Patch"
              ],
              "url": "http://www.securityfocus.com/bid/14162"
            },
            {
              "name": "1014398",
              "refsource": "SECTRACK",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://securitytracker.com/id?1014398"
            },
            {
              "name": "15949",
              "refsource": "SECUNIA",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/15949"
            },
            {
              "name": "APPLE-SA-2005-08-15",
              "refsource": "APPLE",
              "tags": [],
              "url": "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html"
            },
            {
              "name": "APPLE-SA-2005-08-17",
              "refsource": "APPLE",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html"
            },
            {
              "name": "FLSA:162680",
              "refsource": "FEDORA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680"
            },
            {
              "name": "GLSA-200509-18",
              "refsource": "GENTOO",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml"
            },
            {
              "name": "DSA-797",
              "refsource": "DEBIAN",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.debian.org/security/2005/dsa-797"
            },
            {
              "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162391",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162391"
            },
            {
              "name": "FreeBSD-SA-05:16.zlib",
              "refsource": "FREEBSD",
              "tags": [],
              "url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:16.zlib.asc"
            },
            {
              "name": "101989",
              "refsource": "SUNALERT",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101989-1"
            },
            {
              "name": "VU#680620",
              "refsource": "CERT-VN",
              "tags": [
                "Third Party Advisory",
                "US Government Resource"
              ],
              "url": "http://www.kb.cert.org/vuls/id/680620"
            },
            {
              "name": "USN-151-3",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntulinux.org/usn/usn-151-3"
            },
            {
              "name": "SCOSA-2006.6",
              "refsource": "SCO",
              "tags": [],
              "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt"
            },
            {
              "name": "18406",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/18406"
            },
            {
              "name": "18377",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/18377"
            },
            {
              "name": "17054",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/17054"
            },
            {
              "name": "17225",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/17225"
            },
            {
              "name": "17236",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/17236"
            },
            {
              "name": "17326",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/17326"
            },
            {
              "name": "17516",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/17516"
            },
            {
              "name": "19550",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19550"
            },
            {
              "name": "DSA-1026",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2006/dsa-1026"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm"
            },
            {
              "name": "18507",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/18507"
            },
            {
              "name": "19597",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19597"
            },
            {
              "name": "http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html"
            },
            {
              "name": "http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html"
            },
            {
              "name": "24788",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/24788"
            },
            {
              "name": "MDKSA-2005:112",
              "refsource": "MANDRAKE",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:112"
            },
            {
              "name": "MDKSA-2005:196",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:196"
            },
            {
              "name": "MDKSA-2006:070",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:070"
            },
            {
              "name": "APPLE-SA-2008-11-13",
              "refsource": "APPLE",
              "tags": [],
              "url": "http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html"
            },
            {
              "name": "http://support.apple.com/kb/HT3298",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://support.apple.com/kb/HT3298"
            },
            {
              "name": "RHSA-2008:0629",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0629.html"
            },
            {
              "name": "31492",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/31492"
            },
            {
              "name": "ADV-2007-1267",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/1267"
            },
            {
              "name": "ADV-2006-0144",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2006/0144"
            },
            {
              "name": "ADV-2005-0978",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2005/0978"
            },
            {
              "name": "32706",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/32706"
            },
            {
              "name": "hpux-secure-shell-dos(24064)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24064"
            },
            {
              "name": "oval:org.mitre.oval:def:1542",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1542"
            },
            {
              "name": "oval:org.mitre.oval:def:1262",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1262"
            },
            {
              "name": "oval:org.mitre.oval:def:11500",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11500"
            },
            {
              "name": "USN-148-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "https://usn.ubuntu.com/148-1/"
            },
            {
              "name": "20071029 Windows binary of \"Virtual Floppy Drive 2.1\" contains vulnerable zlib (CAN-2005-2096)",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/482950/100/0/threaded"
            },
            {
              "name": "20071029 Re: Windows binary of \"GSview 4.8\" contain vulnerable zlib (CAN-2005-2096)",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/482949/100/0/threaded"
            },
            {
              "name": "20071021 Re: Windows binary of \"GSview 4.8\" contain vulnerable zlib (CAN-2005-2096)",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/482601/100/0/threaded"
            },
            {
              "name": "20071020 Re: Windows binary of \"GSview 4.8\" contain vulnerable zlib (CAN-2005-2096)",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/482571/100/0/threaded"
            },
            {
              "name": "20071018 Official Windows binaries of \"curl\" contain vulnerable zlib 1.2.2 (CAN-2005-2096)",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/482505/100/0/threaded"
            },
            {
              "name": "20071018 Windows binary of \"GSview 4.8\" contain vulnerable zlib (CAN-2005-2096)",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/482503/100/0/threaded"
            },
            {
              "name": "20070404 VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/464745/100/0/threaded"
            },
            {
              "name": "HPSBUX02090",
              "refsource": "HP",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/421411/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": true,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2022-06-22T16:40Z",
      "publishedDate": "2005-07-06T04:00Z"
    }
  }
}

GHSA-W2QV-RHM9-97P2

Vulnerability from github – Published: 2022-05-03 03:14 – Updated: 2022-05-03 03:14

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2005-2096"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2005-07-06T04:00:00Z",
    "severity": "HIGH"
  },
  "details": "zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.",
  "id": "GHSA-w2qv-rhm9-97p2",
  "modified": "2022-05-03T03:14:13Z",
  "published": "2022-05-03T03:14:13Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2096"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162391"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24064"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11500"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1262"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1542"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/148-1"
    },
    {
      "type": "WEB",
      "url": "http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/15949"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17054"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17225"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17236"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17326"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17516"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/18377"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/18406"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/18507"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19550"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19597"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24788"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/31492"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/32706"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200507-05.xml"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1014398"
    },
    {
      "type": "WEB",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101989-1"
    },
    {
      "type": "WEB",
      "url": "http://support.apple.com/kb/HT3298"
    },
    {
      "type": "WEB",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2005/dsa-740"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2005/dsa-797"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2006/dsa-1026"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/680620"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:112"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:196"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:070"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2005-569.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0629.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/421411/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/464745/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/482503/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/482505/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/482571/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/482601/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/482949/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/482950/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/14162"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntulinux.org/usn/usn-151-3"
    },
    {
      "type": "WEB",
      "url": "http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html"
    },
    {
      "type": "WEB",
      "url": "http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2005/0978"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/0144"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/1267"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2005-2096 (GCVE-0-2005-2096)

Description

Solution

Tags

Sightings

Nomenclature