|
|
Emacs的PTY权限设置不充分
发布时间：2001-02-28
更新时间：2001-02-28
严重程度：中
威胁程度：口令恢复
错误类型：设计错误
利用方式：服务器模式
受影响系统GNU Emacs 20.6 and Previous
+ RedHat Linux 6.2 i386
+ MandrakeSoft Linux Mandrake 7.0
+ MandrakeSoft Linux Mandrake 6.1
+ MandrakeSoft Linux Mandrake 6.0
- FreeBSD FreeBSD 4.2
- Debian Linux 2.2 详细描述
Emac是一个很流行的文本编辑器，其中存在一个问题可以导致本地用户获得敏感信息。这个问题存在与从终端的权限限制上，当运行的时候，EMACS没有在从终端上正确设置限制权限，就可以导致一个本地用户监视其他用户的EMACS会话进程，也可能让其他用户伪造EMACS客户端的信息。
测试代码
尚无
解决方案
升级程序：
GNU Emacs 20.6 and Previous:
MandrakeSoft RPM 6.0 i386 emacs-20.6-8.1mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/6.0/RPMS/emacs-20.6-8.1mdk.i586.rpm
MandrakeSoft RPM 6.0 i386 emacs-el-20.6-8.1mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/6.0/RPMS/emacs-el-20.6-8.1mdk.i586.rpm
MandrakeSoft RPM 6.0 i386 emacs-leim-20.6-8.1mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/6.0/RPMS/emacs-leim-20.6-8.1mdk.i586.rpm
MandrakeSoft RPM 6.0 i386 emacs-nox-20.6-8.1mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/6.0/RPMS/emacs-nox-20.6-8.1mdk.i586.rpm
MandrakeSoft RPM 6.1 i386 emacs-20.6-8.1mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/6.1/RPMS/emacs-20.6-8.1mdk.i586.rpm
MandrakeSoft RPM 6.1 i386 emacs-el-20.6-8.1mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/6.1/RPMS/emacs-el-20.6-8.1mdk.i586.rpm
MandrakeSoft RPM 6.1 i386 emacs-leim-20.6-8.1mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/6.1/RPMS/emacs-leim-20.6-8.1mdk.i586.rpm
MandrakeSoft RPM 6.1 i386 emacs-nox-20.6-8.1mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/6.1/RPMS/emacs-nox-20.6-8.1mdk.i586.rpm
MandrakeSoft RPM 6.1 i386 emacs-X11-20.6-8.1mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/6.1/RPMS/emacs-X11-20.6-8.1mdk.i586.rpm
MandrakeSoft RPM 7.0 i386 emacs-20.6-8.1mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.0/RPMS/emacs-20.6-8.1mdk.i586.rpm
MandrakeSoft RPM 7.0 i386 emacs-el-20.6-8.1mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.0/RPMS/emacs-el-20.6-8.1mdk.i586.rpm
MandrakeSoft RPM 7.0 i386 emacs-leim-20.6-8.1mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.0/RPMS/emacs-leim-20.6-8.1mdk.i586.rpm
MandrakeSoft RPM 7.0 i386 emacs-nox-20.6-8.1mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.0/RPMS/emacs-nox-20.6-8.1mdk.i586.rpm
MandrakeSoft RPM 7.0 i386 emacs-X11-20.6-8.1mdk.i586.rpm
http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.0/RPMS/emacs-X11-20.6-8.1mdk.i586.rpm
相关信息
|
