ncompress records
3 published records for vendor ncompress.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 66.7%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
32Monitor | CVE-2006-1168No exploit | The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), ncompress · ncompress | High7.5 | — | 5.8% | Aug 14, 2006 |
31Monitor | CVE-2001-1413No exploit | Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundariesncompress · ncompress | High7.5 | — | 4.7% | Dec 23, 2004 |
8Monitor | CVE-2005-2991No exploit | ncompress 4.2.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files using (1) zdiff or (2) zncompress · ncompress | Low2.1 | — | 0.3% | Sep 20, 2005 |
- CVE-2006-116832Monitor
The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash),
HighCVSS 7.5No exploitEPSS 5%ncompress · ncompressAug 14, 2006
- CVE-2001-141331Monitor
Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries
HighCVSS 7.5No exploitEPSS 4%ncompress · ncompressDec 23, 2004
- CVE-2005-29918Monitor
ncompress 4.2.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files using (1) zdiff or (2) z
LowCVSS 2.1No exploitEPSS 0%ncompress · ncompressSep 20, 2005