Debian DSA-624-1 : zip - buffer overflow
Critical Nessus Plugin ID 16102
SynopsisThe remote Debian host is missing a security-related update.
DescriptionA buffer overflow has been discovered in zip, the archiver for .zip files. When doing recursive folder compression the program did not check the resulting path length, which would lead to memory being overwritten. A malicious person could convince a user to create an archive containing a specially crafted path name, which could lead to the execution of arbitrary code.
SolutionUpgrade the zip package.
For the stable distribution (woody) this problem has been fixed in version 2.30-5woody2.