|
|
Samba产生的临时文件存在符号连接漏洞
发布时间：2001-04-21
更新时间：2001-04-21
严重程度：高
威胁程度：权限提升
错误类型：竞争条件
利用方式：服务器模式
受影响系统Samba Samba 2.0.7
+ Wirex Immunix OS 7.0-Beta
+ Wirex Immunix OS 7.0
+ Wirex Immunix OS 6.2
+ Trustix Secure Linux 1.2
+ Trustix Secure Linux 1.1
+ RedHat Linux 7.0
+ RedHat Linux 6.2E sparc
+ RedHat Linux 6.2E i386
+ RedHat Linux 6.2E alpha
+ RedHat Linux 6.2 sparc
+ RedHat Linux 6.2 i386
+ RedHat Linux 6.2 alpha
+ RedHat Linux 6.1 sparc
+ RedHat Linux 6.1 i386
+ RedHat Linux 6.1 alpha
+ Progeny Debian 1.0
+ MandrakeSoft Linux Mandrake 7.1
+ MandrakeSoft Linux Mandrake 7.0
+ Debian Linux 2.3 sparc
+ Debian Linux 2.3 powerpc
+ Debian Linux 2.3 alpha
+ Debian Linux 2.3
+ Connectiva Linux 6.0
+ Connectiva Linux 5.1
+ Connectiva Linux 5.0
+ Connectiva Linux 4.2
+ Connectiva Linux 4.1
+ Connectiva Linux 4.0es
+ Connectiva Linux 4.0
+ Connectiva Linux graficas
+ Connectiva Linux ecommerce
+ Caldera eServer 2.3.1
+ Caldera eDesktop 2.4
+ Caldera OpenLinux 2.3
Samba Samba 2.0.6
Samba Samba 2.0.5
Samba Samba 2.0.4
+ RedHat Linux 6.0 i386
+ RedHat Linux 5.2 i386
+ RedHat Linux 4.2
+ Debian Linux 2.1 详细描述
Samba是文件共享程序，可以在MS WINDOWS和UNIX系统之间提供文件和打印服务共享。由于Samba在/tmp目录下会建立不安全的文件，可以导致用户连接符号连接到其他属性的系统文件，并依靠执行者的权限产生一定程度的拒绝服务攻击。
测试代码
尚无
解决方案
下载新的程序：
Samba Samba 2.0.7:
Samba upgrade Samba 2.0.8
ftp://ftp.samba.org/pub/samba/samba-2.0.8.tar.gz
Debian upgrade 2.2 alpha samba-common_2.0.7-3.2_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/samba-common_2.0.7-3.2_alpha.deb
Debian upgrade 2.2 alpha samba_2.0.7-3.2_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/samba_2.0.7-3.2_alpha.deb
Debian upgrade 2.2 alpha smbfs_2.0.7-3.2_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/smbfs_2.0.7-3.2_alpha.deb
Debian upgrade 2.2 alpha swat_2.0.7-3.2_alpha.deb
http://security.debian.org/dists/stable/updates/main/binary-alpha/swat_2.0.7-3.2_alpha.deb
Debian upgrade 2.2 arm samba_2.0.7-3.2_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/samba_2.0.7-3.2_arm.deb
Debian upgrade 2.2 arm smbclient_2.0.7-3.2_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/smbclient_2.0.7-3.2_arm.deb
Debian upgrade 2.2 arm smbfs_2.0.7-3.2_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/smbfs_2.0.7-3.2_arm.deb
Debian upgrade 2.2 arm swat_2.0.7-3.2_arm.deb
http://security.debian.org/dists/stable/updates/main/binary-arm/swat_2.0.7-3.2_arm.deb
Debian upgrade 2.2 i386 samba-common_2.0.7-3.2_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/samba-common_2.0.7-3.2_i386.deb
Debian upgrade 2.2 i386 samba_2.0.7-3.2_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/samba_2.0.7-3.2_i386.deb
Debian upgrade 2.2 i386 smbclient_2.0.7-3.2_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/smbclient_2.0.7-3.2_i386.deb
Debian upgrade 2.2 i386 smbfs_2.0.7-3.2_i386.deb
http://security.debian.org/dists/stable/updates/main/binary-i386/smbfs_2.0.7-3.2_i386.deb
Debian upgrade 2.2 m68k samba-common_2.0.7-3.2_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/samba-common_2.0.7-3.2_m68k.deb
Debian upgrade 2.2 m68k samba_2.0.7-3.2_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/samba_2.0.7-3.2_m68k.deb
Debian upgrade 2.2 m68k smbclient_2.0.7-3.2_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/smbclient_2.0.7-3.2_m68k.deb
Debian upgrade 2.2 m68k smbfs_2.0.7-3.2_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/smbfs_2.0.7-3.2_m68k.deb
Debian upgrade 2.2 m68k swat_2.0.7-3.2_m68k.deb
http://security.debian.org/dists/stable/updates/main/binary-m68k/swat_2.0.7-3.2_m68k.deb
Debian upgrade 2.2 ppc samba-common_2.0.7-3.2_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/samba-common_2.0.7-3.2_powerpc.deb
Debian upgrade 2.2 ppc samba_2.0.7-3.2_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/samba_2.0.7-3.2_powerpc.deb
Debian upgrade 2.2 ppc smbclient_2.0.7-3.2_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/smbclient_2.0.7-3.2_powerpc.deb
Debian upgrade 2.2 ppc smbfs_2.0.7-3.2_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/smbfs_2.0.7-3.2_powerpc.deb
Debian upgrade 2.2 ppc swat_2.0.7-3.2_powerpc.deb
http://security.debian.org/dists/stable/updates/main/binary-powerpc/swat_2.0.7-3.2_powerpc.deb
Debian upgrade 2.2 sparc samba-common_2.0.7-3.2_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/samba-common_2.0.7-3.2_sparc.deb
Debian upgrade 2.2 sparc smbclient_2.0.7-3.2_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/smbclient_2.0.7-3.2_sparc.deb
Debian upgrade 2.2 sparc smbfs_2.0.7-3.2_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/smbfs_2.0.7-3.2_sparc.deb
Debian upgrade 2.2 sparc swat_2.0.7-3.2_sparc.deb
http://security.debian.org/dists/stable/updates/main/binary-sparc/swat_2.0.7-3.2_sparc.deb
Conectiva RPM 4.0 i386 samba-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/4.0/i386/samba-2.0.8-1cl.i386.rpm
Conectiva RPM 4.0 i386 samba-clients-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/4.0/i386/samba-clients-2.0.8-1cl.i386.rpm
Conectiva RPM 4.0 i386 samba-doc-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/4.0/i386/samba-doc-2.0.8-1cl.i386.rpm
Conectiva RPM 4.0 i386 samba-swat-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/4.0/i386/samba-swat-2.0.8-1cl.i386.rpm
Conectiva RPM 4.0es i386 samba-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/4.0es/i386/samba-2.0.8-1cl.i386.rpm
Conectiva RPM 4.0es i386 samba-clients-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/4.0es/i386/samba-clients-2.0.8-1cl.i386.rpm
Conectiva RPM 4.0es i386 samba-doc-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/4.0es/i386/samba-doc-2.0.8-1cl.i386.rpm
Conectiva RPM 4.0es i386 samba-swat-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/4.0es/i386/samba-swat-2.0.8-1cl.i386.rpm
Conectiva RPM 4.1 i386 samba-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/4.1/i386/samba-2.0.8-1cl.i386.rpm
Conectiva RPM 4.1 i386 samba-clients-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/4.1/i386/samba-clients-2.0.8-1cl.i386.rpm
Conectiva RPM 4.1 i386 samba-doc-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/4.1/i386/samba-doc-2.0.8-1cl.i386.rpm
Conectiva RPM 4.1 i386 samba-swat-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/4.1/i386/samba-swat-2.0.8-1cl.i386.rpm
Conectiva RPM 4.2 i386 samba-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/4.2/i386/samba-2.0.8-1cl.i386.rpm
Conectiva RPM 4.2 i386 samba-clients-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/4.2/i386/samba-clients-2.0.8-1cl.i386.rpm
Conectiva RPM 4.2 i386 samba-doc-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/4.2/i386/samba-doc-2.0.8-1cl.i386.rpm
Conectiva RPM 4.2 i386 samba-swat-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/4.2/i386/samba-swat-2.0.8-1cl.i386.rpm
Conectiva RPM 5.0 i386 samba-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.0/i386/samba-2.0.8-1cl.i386.rpm
Conectiva RPM 5.0 i386 samba-clients-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.0/i386/samba-clients-2.0.8-1cl.i386.rpm
Conectiva RPM 5.0 i386 samba-doc-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.0/i386/samba-doc-2.0.8-1cl.i386.rpm
Conectiva RPM 5.0 i386 samba-swat-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.0/i386/samba-swat-2.0.8-1cl.i386.rpm
Conectiva RPM 5.1 i386 samba-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/samba-2.0.8-1cl.i386.rpm
Conectiva RPM 5.1 i386 samba-clients-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/samba-clients-2.0.8-1cl.i386.rpm
Conectiva RPM 5.1 i386 samba-doc-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/samba-doc-2.0.8-1cl.i386.rpm
Conectiva RPM 5.1 i386 samba-swat-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/samba-swat-2.0.8-1cl.i386.rpm
Conectiva RPM 6.0 i386 samba-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/samba-2.0.8-1cl.i386.rpm
Conectiva RPM 6.0 i386 samba-clients-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/samba-clients-2.0.8-1cl.i386.rpm
Conectiva RPM 6.0 i386 samba-doc-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/samba-doc-2.0.8-1cl.i386.rpm
Conectiva RPM 6.0 i386 samba-swat-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/samba-swat-2.0.8-1cl.i386.rpm
Conectiva RPM ecommerce i386 samba-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/samba-2.0.8-1cl.i386.rpm
Conectiva RPM ecommerce i386 samba-clients-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/samba-clients-2.0.8-1cl.i386.rpm
Conectiva RPM ecommerce i386 samba-doc-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/samba-doc-2.0.8-1cl.i386.rpm
Conectiva RPM ecommerce i386 samba-swat-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/samba-swat-2.0.8-1cl.i386.rpm
Conectiva RPM graficas i386 samba-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/samba-2.0.8-1cl.i386.rpm
Conectiva RPM graficas i386 samba-clients-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/samba-clients-2.0.8-1cl.i386.rpm
Conectiva RPM graficas i386 samba-doc-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/samba-doc-2.0.8-1cl.i386.rpm
Conectiva RPM graficas i386 samba-swat-2.0.8-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/samba-swat-2.0.8-1cl.i386.rpm
Samba Samba 2.0.6:
Samba upgrade Samba 2.0.8
ftp://ftp.samba.org/pub/samba/samba-2.0.8.tar.gz
Samba Samba 2.0.5:
Samba upgrade Samba 2.0.8
ftp://ftp.samba.org/pub/samba/samba-2.0.8.tar.gz
Samba Samba 2.0.4:
Samba upgrade Samba 2.0.8
ftp://ftp.samba.org/pub/samba/samba-2.0.8.tar.gz
相关信息
|
