CVE-2008-4420

Multiple stack-based buffer overflows in DZIP32.DLL before 5.0.0.8 in DynaZip Max and DZIPS32.DLL before 6.0.0.5 in DynaZip Max Secure; as used in HP OpenView Performance Agent C.04.60, HP Performance Agent C.04.70 and C.04.72, TurboZIP 6.0, and other products; allow user-assisted attackers to execute arbitrary code via a long filename in a ZIP archive during a (1) Fix (aka Repair), (2) Add, (3) Update, or (4) Freshen action, a related issue to CVE-2006-3985.

• CWE-119

• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01622011Vendor Advisory
• http://innermedia.com/upgrades.html
• http://osvdb.org/53478
• http://secunia.com/advisories/21180Vendor Advisory
• http://secunia.com/advisories/34659Vendor Advisory
• http://vuln.sg/dynazip5007-en.htmlExploit
• http://vuln.sg/turbozip6-en.html
• http://www.securityfocus.com/archive/1/441083
• http://www.securityfocus.com/archive/1/441084
• http://www.securityfocus.com/bid/19143Patch
• http://www.securitytracker.com/id?1022021
• http://www.vupen.com/english/advisories/2006/2957Vendor Advisory
• http://www.vupen.com/english/advisories/2009/0980Vendor Advisory
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01622011Vendor Advisory
• http://innermedia.com/upgrades.html
• http://osvdb.org/53478
• http://secunia.com/advisories/21180Vendor Advisory
• http://secunia.com/advisories/34659Vendor Advisory
• http://vuln.sg/dynazip5007-en.htmlExploit
• http://vuln.sg/turbozip6-en.html
• http://www.securityfocus.com/archive/1/441083
• http://www.securityfocus.com/archive/1/441084
• http://www.securityfocus.com/bid/19143Patch
• http://www.securitytracker.com/id?1022021
• http://www.vupen.com/english/advisories/2006/2957Vendor Advisory
• http://www.vupen.com/english/advisories/2009/0980Vendor Advisory

Published

Apr 13, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4414Unspecified vulnerability in the AdvFS showfile command in H…
• CVE-2008-4415Unspecified vulnerability in HP Service Manager (HPSM) befor…
• CVE-2008-4416Unspecified vulnerability in the kernel in HP HP-UX B.11.31 …
• CVE-2008-4417Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2008-4418Unspecified vulnerability in DCE in HP HP-UX B.11.11, B.11.2…
• CVE-2008-4419Directory traversal vulnerability in the HP JetDirect web ad…
• CVE-2008-4421Directory traversal vulnerability in MetaGauge 1.0.0.17, and…
• CVE-2008-4422Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2008-4423SQL injection vulnerability in index.php in Ovidentia 6.6.5 …
• CVE-2008-4424Cross-site scripting (XSS) vulnerability in index.php in Dom…
• CVE-2008-4425Directory traversal vulnerability in upload.php in Phlatline…
• CVE-2008-4426Cross-site scripting (XSS) vulnerability in events.php in Ph…