CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
Percentile
92.8%
CentOS Errata and Security Advisory CESA-2007:0124
The file command is used to identify a particular file according to the
type of data contained by the file.
An integer underflow flaw was found in the file utility. An attacker could
create a carefully crafted file which, if examined by a victim using the
file utility, could lead to arbitrary code execution. (CVE-2007-1536)
This issue did not affect the version of the file utility distributed with
Red Hat Enterprise Linux 2.1 or 3.
Users should upgrade to this erratum package, which contain a backported
patch to correct this issue.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2007-March/075792.html
https://lists.centos.org/pipermail/centos-announce/2007-March/075794.html
https://lists.centos.org/pipermail/centos-announce/2007-March/075795.html
https://lists.centos.org/pipermail/centos-announce/2007-March/075796.html
Affected packages:
file
Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0124
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
CentOS | 4 | ia64 | file | < 4.10-3.EL4.5 | file-4.10-3.EL4.5.ia64.rpm |
CentOS | 4 | s390 | file | < 4.10-3.EL4.5 | file-4.10-3.EL4.5.s390.rpm |
CentOS | 4 | s390x | file | < 4.10-3.EL4.5 | file-4.10-3.EL4.5.s390x.rpm |
CentOS | 4 | x86_64 | file | < 4.10-3.EL4.5 | file-4.10-3.EL4.5.x86_64.rpm |
CentOS | 4 | i386 | file | < 4.10-3.EL4.5 | file-4.10-3.EL4.5.i386.rpm |