Debian DSA-2074-1 : ncompress - integer underflow
Medium Nessus Plugin ID 47792
SynopsisThe remote Debian host is missing a security-related update.
DescriptionAki Helin discovered an integer underflow in ncompress, the original Lempel-Ziv compress/uncompress programs. This could lead to the execution of arbitrary code when trying to decompress a crafted LZW compressed gzip archive.
SolutionUpgrade the ncompress package.
For the stable distribution (lenny), this problem has been fixed in version 220.127.116.11-1+lenny1.