FreeBSD : unace -- multiple vulnerabilities (1d3a2737-7eb7-11d9-acf7-000854d03344)

Medium Nessus Plugin ID 18860


The remote FreeBSD host is missing one or more security-related updates.


Ulf Harnhammar reports :

- There are buffer overflows when extracting, testing or listing specially prepared ACE archives.

- There are directory traversal bugs when extracting ACE archives.

- There are also buffer overflows when dealing with long (>17000 characters) command line arguments.

Secunia reports :

The vulnerabilities have been confirmed in version 1.2b. One of the buffer overflow vulnerabilities have also been reported in version 2.04, 2.2 and 2.5. Other versions may also be affected.

Successful exploitation may allow execution of arbitrary code.


Update the affected packages.

See Also

Plugin Details

Severity: Medium

ID: 18860

File Name: freebsd_pkg_1d3a27377eb711d9acf7000854d03344.nasl

Version: $Revision: 1.16 $

Type: local

Published: 2005/07/13

Modified: 2016/05/26

Dependencies: 12634

Risk Information

Risk Factor: Medium


Base Score: 5.1

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:linux-unace, p-cpe:/a:freebsd:freebsd:unace, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 2005/02/22

Vulnerability Publication Date: 2005/02/14

Reference Information

CVE: CVE-2005-0160, CVE-2005-0161

CERT: 215006

Secunia: 14359