RHSA-2003%3A199 — Vulnetix

RHSA-2003%3A199 PUBLISHED

Updated unzip packages resolving a vulnerability allowing arbitrary files to be overwritten are now available. [Updated 15 August 2003] Ben Laurie found that the original patch to fix this issue missed a case where the path component included a quoted slash. These updated packages contain a new patch that corrects this issue.

Affected Products

Vendor	Product	Versions
	Red Hat Linux 9
	Red Hat Linux 7.3
	Red Hat Linux 8.0
	Red Hat Linux 7.2
	Red Hat Linux 7.1

Exploit Intelligence

sionnx/cve-2003-0282 (github-poc)
sionnx/cve-2003-0282 (github-poc)
https://access.redhat.com/errata/RHSA-2003:199 (circl)
http://marc.theaimsgroup.com/?l=bugtraq&m=105259038503175 (circl)
https://security.access.redhat.com/data/csaf/v2/advisories/2003/rhsa-2003_199.json (circl)

Timeline

Jul 1, 2003 CVE Published
Nov 21, 2024 CVE Updated
Apr 7, 2026 Distribution Patch
Apr 7, 2026 Distribution Patch
Apr 7, 2026 Security Advisory
Apr 24, 2026 Security Advisory

References

https://access.redhat.com/errata/RHSA-2003:199 advisory
http://marc.theaimsgroup.com/?l=bugtraq&m=105259038503175 url
https://security.access.redhat.com/data/csaf/v2/advisories/2003/rhsa-2003_199.json advisory

Open in Interactive Console →