Description
Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via (1) 2 overflows in ACE archives, (2) a long command line argument, or (3) certain "Ready for next volume" messages.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | unace | 1.2b-3 | — |
| Debian 13 | unace | 1.2b-3 | — |
| Debian 12 | unace | 1.2b-3 | — |
References
- VU#215006 third-party-advisory
- 12630 vdb-entry
- 14359 third-party-advisory
- 20050222 unace-1.2b multiple buffer overflows and directory traversal bugs mailing-list
- SUSE-SR:2005:016 vendor-advisory