Rahul Dhesi Zoo vulnerabilities

CVE-2007-1673 [HIGH] CWE-399 CVE-2007-1673: unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

CVE-2006-1269 [MEDIUM] CVE-2006-1269: Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbi Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments, which are not properly handled during archive creation. NOTE: since this issue is local and not setuid, the set of attack scenarios is limited, although is reasonable to expect that there are some situations

CVE-2006-0855 [MEDIUM] CWE-119 CVE-2006-0855: Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected.