Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2001-1413

security flaw

Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument.

CVSS 2.0 · 7.5 High EPSS 4.8% KEV · Not listed
Vendors
Ncompress Redhat
Products
Ncompress Enterprise Linux
CVE-2005-2991

ncompress: insecure tmp file handling may lead to file overwrite

ncompress 4.2.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files using (1) zdiff or (2) zcmp, a different vulnerability than CVE-2004-0970.

CVSS 3.1 · 5.0 Medium EPSS < 1% KEV · Not listed
Vendors
Ncompress
Products
Ncompress
CVE-2006-1168

ncompress: .bss buffer underflow in decompression

The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code, via crafted data that leads to a buffer underflow.

CVSS 2.0 · 7.5 High EPSS 5.8% KEV · Not listed
Vendors
Ncompress Redhat
Products
Ncompress Enterprise Linux