xfocus logo xfocus title
首页 焦点原创 安全文摘 安全工具 安全漏洞 焦点项目 焦点论坛 关于我们
English Version

[RHSA-2001:160-09] glibc升级


发布时间:2001-12-17
更新时间:2001-12-17
严重程度:
威胁程度:本地管理员权限
错误类型:输入验证错误
利用方式:服务器模式

受影响系统
glibc
详细描述
glibc中在glob(3)实现中存在缓冲溢出,可以导致使用这个函数的程序缓冲溢出。

在glibc中还修补在动态连接上一个缺陷,此可导致导致DT_RUNPATH 动态标志行为
与DT_RPATH 标志相同,如搜索路径不遵循LD_LIBRARY_PATH 环境变量。

测试代码
尚无

解决方案
升级程序:

Red Hat Linux 6.2:


SRPMS:
ftp://updates.redhat.com/6.2/en/os/SRPMS/glibc-2.1.3-23.src.rpm


alpha:
ftp://updates.redhat.com/6.2/en/os/alpha/glibc-2.1.3-23.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/glibc-devel-2.1.3-23.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/glibc-profile-2.1.3-23.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/nscd-2.1.3-23.alpha.rpm


i386:
ftp://updates.redhat.com/6.2/en/os/i386/glibc-2.1.3-23.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/glibc-devel-2.1.3-23.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/glibc-profile-2.1.3-23.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/nscd-2.1.3-23.i386.rpm


sparc:
ftp://updates.redhat.com/6.2/en/os/sparc/glibc-2.1.3-23.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/glibc-devel-2.1.3-23.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/glibc-profile-2.1.3-23.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/nscd-2.1.3-23.sparc.rpm


sparcv9:
ftp://updates.redhat.com/6.2/en/os/sparcv9/glibc-2.1.3-23.sparcv9.rpm


Red Hat Linux 7.0:


SRPMS:
ftp://updates.redhat.com/7.0/en/os/SRPMS/glibc-2.2.4-18.7.0.3.src.rpm


alpha:
ftp://updates.redhat.com/7.0/en/os/alpha/glibc-2.2.4-18.7.0.3.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/glibc-devel-2.2.4-18.7.0.3.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/glibc-profile-2.2.4-18.7.0.3.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/glibc-common-2.2.4-18.7.0.3.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/nscd-2.2.4-18.7.0.3.alpha.rpm


alphaev6:
ftp://updates.redhat.com/7.0/en/os/alphaev6/glibc-2.2.4-18.7.0.3.alphaev6.rpm


i386:
ftp://updates.redhat.com/7.0/en/os/i386/glibc-2.2.4-18.7.0.3.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/glibc-devel-2.2.4-18.7.0.3.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/glibc-profile-2.2.4-18.7.0.3.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/glibc-common-2.2.4-18.7.0.3.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/nscd-2.2.4-18.7.0.3.i386.rpm


i686:
ftp://updates.redhat.com/7.0/en/os/i686/glibc-2.2.4-18.7.0.3.i686.rpm


Red Hat Linux 7.1:


SRPMS:
ftp://updates.redhat.com/7.1/en/os/SRPMS/glibc-2.2.4-19.3.src.rpm


alpha:
ftp://updates.redhat.com/7.1/en/os/alpha/glibc-2.2.4-19.3.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/glibc-devel-2.2.4-19.3.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/glibc-profile-2.2.4-19.3.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/glibc-common-2.2.4-19.3.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/nscd-2.2.4-19.3.alpha.rpm


alphaev6:
ftp://updates.redhat.com/7.1/en/os/alphaev6/glibc-2.2.4-19.3.alphaev6.rpm


i386:
ftp://updates.redhat.com/7.1/en/os/i386/glibc-2.2.4-19.3.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/glibc-devel-2.2.4-19.3.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/glibc-profile-2.2.4-19.3.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/glibc-common-2.2.4-19.3.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/nscd-2.2.4-19.3.i386.rpm


i686:
ftp://updates.redhat.com/7.1/en/os/i686/glibc-2.2.4-19.3.i686.rpm


ia64:
ftp://updates.redhat.com/7.1/en/os/ia64/glibc-2.2.4-19.3.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/glibc-devel-2.2.4-19.3.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/glibc-profile-2.2.4-19.3.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/glibc-common-2.2.4-19.3.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/nscd-2.2.4-19.3.ia64.rpm


Red Hat Linux 7.2:


SRPMS:
ftp://updates.redhat.com/7.2/en/os/SRPMS/glibc-2.2.4-19.3.src.rpm


i386:
ftp://updates.redhat.com/7.2/en/os/i386/glibc-2.2.4-19.3.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/glibc-devel-2.2.4-19.3.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/glibc-profile-2.2.4-19.3.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/glibc-common-2.2.4-19.3.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/nscd-2.2.4-19.3.i386.rpm


i686:
ftp://updates.redhat.com/7.2/en/os/i686/glibc-2.2.4-19.3.i686.rpm




7. Verification:


MD5 sum Package Name
--------------------------------------------------------------------------
c357416249d75bdc045f6a0bd375d38e 6.2/en/os/SRPMS/glibc-2.1.3-23.src.rpm
1488ff1e3bd4505ebad71e9eadc6cfe3 6.2/en/os/alpha/glibc-2.1.3-23.alpha.rpm
ccf5c9dd4c68eaae2f7661bce814a686 6.2/en/os/alpha/glibc-devel-2.1.3-23.alpha.rpm
87e6ba6d7600a3b3fd35e106745fa788 6.2/en/os/alpha/glibc-profile-2.1.3-23.alpha.rpm
a8679c548f4de4c413720b88231b79ea 6.2/en/os/alpha/nscd-2.1.3-23.alpha.rpm
3e8cba807ffdce5579114bb2f3fbbdfd 6.2/en/os/i386/glibc-2.1.3-23.i386.rpm
aa3c90d7d4cedfd4ebf45a44312fd3a2 6.2/en/os/i386/glibc-devel-2.1.3-23.i386.rpm
07197b46d6f567131b43330bcc59b28f 6.2/en/os/i386/glibc-profile-2.1.3-23.i386.rpm
ec8527e6b9924ce9e8a5824d1983a606 6.2/en/os/i386/nscd-2.1.3-23.i386.rpm
6e3523c567b724d6875b05d48a8781e1 6.2/en/os/sparc/glibc-2.1.3-23.sparc.rpm
9435475af4f944accc5c33119f4bebe1 6.2/en/os/sparc/glibc-devel-2.1.3-23.sparc.rpm
b12cb08aaed71abab6c8b8eaa2b41072 6.2/en/os/sparc/glibc-profile-2.1.3-23.sparc.rpm
b124928f89fb1a46cff833056d44dd79 6.2/en/os/sparc/nscd-2.1.3-23.sparc.rpm
907c6bdf5a8dd1c4f2803f6d8f3a0ae3 6.2/en/os/sparcv9/glibc-2.1.3-23.sparcv9.rpm
ae84cff41c783ea0b75f083870a756f4 7.0/en/os/SRPMS/glibc-2.2.4-18.7.0.3.src.rpm
f1c2cca381e329afcb9f580b3b889363 7.0/en/os/alpha/glibc-2.2.4-18.7.0.3.alpha.rpm
2076d9b49459b1b9d51a71ca6c1f7f6a 7.0/en/os/alpha/glibc-common-2.2.4-18.7.0.3.alpha.rpm
f375a5b1b44110fb0fee04b69b6f2c63 7.0/en/os/alpha/glibc-devel-2.2.4-18.7.0.3.alpha.rpm
8f2430025f19cec38df29f673cd9b7bb 7.0/en/os/alpha/glibc-profile-2.2.4-18.7.0.3.alpha.rpm
1bfd015bc33811a1c6ad08f57d1bac29 7.0/en/os/alpha/nscd-2.2.4-18.7.0.3.alpha.rpm
dcbfacca113f7ea4d3d7c75baac8d0fb 7.0/en/os/alphaev6/glibc-2.2.4-18.7.0.3.alphaev6.rpm
05bb9c3de55e04b8fca48d3508c99d03 7.0/en/os/i386/glibc-2.2.4-18.7.0.3.i386.rpm
b4269c4c1c5e48166068a691cd0fd968 7.0/en/os/i386/glibc-common-2.2.4-18.7.0.3.i386.rpm
e46be81d1912d78ea5a1e9db63623fe6 7.0/en/os/i386/glibc-devel-2.2.4-18.7.0.3.i386.rpm
fedfe5e3d2cdbeef9eb616fbe215cb96 7.0/en/os/i386/glibc-profile-2.2.4-18.7.0.3.i386.rpm
dff1ecb55acef7be12cffa5c45b725b1 7.0/en/os/i386/nscd-2.2.4-18.7.0.3.i386.rpm
2cda97a74018abad487b749923607cee 7.0/en/os/i686/glibc-2.2.4-18.7.0.3.i686.rpm
1ab748bd3fe04702751b7633b98a315d 7.1/en/os/SRPMS/glibc-2.2.4-19.3.src.rpm
3e2faca6f40e6167f88eea85eac58940 7.1/en/os/alpha/glibc-2.2.4-19.3.alpha.rpm
56538cf7a756228a90f25abd85774228 7.1/en/os/alpha/glibc-common-2.2.4-19.3.alpha.rpm
b5a3914236dc76181d4f1b417fcb08f2 7.1/en/os/alpha/glibc-devel-2.2.4-19.3.alpha.rpm
11ddc075098bd3cd3953d86658250620 7.1/en/os/alpha/glibc-profile-2.2.4-19.3.alpha.rpm
b4c02b68cf7a98376707e11a665e8057 7.1/en/os/alpha/nscd-2.2.4-19.3.alpha.rpm
0c74520246ae0f5b1ccacfcd65223feb 7.1/en/os/alphaev6/glibc-2.2.4-19.3.alphaev6.rpm
9ece40bc4b5a2fb8734c7807b28b86a4 7.1/en/os/i386/glibc-2.2.4-19.3.i386.rpm
8b9c9635214c475b6fd6c7e5dab3d3c0 7.1/en/os/i386/glibc-common-2.2.4-19.3.i386.rpm
78ddc49ad3cbb1f769d61f2357466d8d 7.1/en/os/i386/glibc-devel-2.2.4-19.3.i386.rpm
e53b1f547dd67c86aa2cf969f54ff015 7.1/en/os/i386/glibc-profile-2.2.4-19.3.i386.rpm
ce89d05dad8b1278d3a753676b96e5aa 7.1/en/os/i386/nscd-2.2.4-19.3.i386.rpm
1dfabf932afb04048d12622e6fc6859f 7.1/en/os/i686/glibc-2.2.4-19.3.i686.rpm
24cb3c3be8b8b50c709f5dfd593f2b0a 7.1/en/os/ia64/glibc-2.2.4-19.3.ia64.rpm
330ec0f05b6d2e83c4c57dcad9c513de 7.1/en/os/ia64/glibc-common-2.2.4-19.3.ia64.rpm
5bf8a4da1d8e34b79c4bdc953d610467 7.1/en/os/ia64/glibc-devel-2.2.4-19.3.ia64.rpm
5163bf8fa2897e653c93a9234a0d39b8 7.1/en/os/ia64/glibc-profile-2.2.4-19.3.ia64.rpm
64a273fa127fbd09f7f3a30b00390972 7.1/en/os/ia64/nscd-2.2.4-19.3.ia64.rpm
1ab748bd3fe04702751b7633b98a315d 7.2/en/os/SRPMS/glibc-2.2.4-19.3.src.rpm
9ece40bc4b5a2fb8734c7807b28b86a4 7.2/en/os/i386/glibc-2.2.4-19.3.i386.rpm
8b9c9635214c475b6fd6c7e5dab3d3c0 7.2/en/os/i386/glibc-common-2.2.4-19.3.i386.rpm
78ddc49ad3cbb1f769d61f2357466d8d 7.2/en/os/i386/glibc-devel-2.2.4-19.3.i386.rpm
e53b1f547dd67c86aa2cf969f54ff015 7.2/en/os/i386/glibc-profile-2.2.4-19.3.i386.rpm
ce89d05dad8b1278d3a753676b96e5aa 7.2/en/os/i386/nscd-2.2.4-19.3.i386.rpm
1dfabf932afb04048d12622e6fc6859f 7.2/en/os/i686/glibc-2.2.4-19.3.i686.rpm

相关信息
参考:http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2001-0886
http://archives.neohapsis.com/archives/bugtraq/2001-12/0155.html