VNC HTTP服务程序存在拒绝服务攻击漏洞发布时间：2002-03-25 更新时间：2002-03-25 严重程度：中 威胁程度：远程拒绝服务 错误类型：意外情况处置错误 利用方式：服务器模式 BUGTRAQ ID：4345 受影响系统 AT&T VNC 3.3.3R2详细描述 VNC是虚拟网络电脑软件程序，由AT&T免费发行，设计允许有足够权限的用户访问远程桌面。 在Red Hat VNC软件包中存在漏洞，VNC服务器包含一个小型HTTP服务实现。由于ZIB库上的错误实现，可导致HTTP服务程序冻结，拒绝为其他合法用户服务。 目前不清楚是否对其他VNC版本有效。 测试代码 尚无 解决方案 下载补丁程序： AT&T VNC 3.3.3R2: Red Hat Upgrade vnc-3.3.3r2-18.4.src.rpm ftp://updates.redhat.com/7.0/en/os/SRPMS/vnc-3.3.3r2-18.4.src.rpm Source RPM. Red Hat Upgrade vnc-3.3.3r2-18.4.alpha.rpm ftp://updates.redhat.com/7.0/en/os/alpha/vnc-3.3.3r2-18.4.alpha.rpm Red Hat Upgrade vnc-doc-3.3.3r2-18.4.alpha.rpm ftp://updates.redhat.com/7.0/en/os/alpha/vnc-doc-3.3.3r2-18.4.alpha.rpm Red Hat Upgrade vnc-server-3.3.3r2-18.4.alpha.rpm ftp://updates.redhat.com/7.0/en/os/alpha/vnc-server-3.3.3r2-18.4.alpha.rpm Red Hat Upgrade vnc-3.3.3r2-18.4.i386.rpm ftp://updates.redhat.com/7.0/en/os/i386/vnc-3.3.3r2-18.4.i386.rpm Red Hat Upgrade vnc-doc-3.3.3r2-18.4.i386.rpm ftp://updates.redhat.com/7.0/en/os/i386/vnc-doc-3.3.3r2-18.4.i386.rpm Red Hat Upgrade vnc-server-3.3.3r2-18.4.i386.rpm ftp://updates.redhat.com/7.0/en/os/i386/vnc-server-3.3.3r2-18.4.i386.rpm Red Hat Upgrade vnc-3.3.3r2-18.4.src.rpm ftp://updates.redhat.com/7.1/en/os/SRPMS/vnc-3.3.3r2-18.4.src.rpm Source RPM. Red Hat Upgrade vnc-3.3.3r2-18.4.alpha.rpm ftp://updates.redhat.com/7.1/en/os/alpha/vnc-3.3.3r2-18.4.alpha.rpm Red Hat Upgrade vnc-doc-3.3.3r2-18.4.alpha.rpm ftp://updates.redhat.com/7.1/en/os/alpha/vnc-doc-3.3.3r2-18.4.alpha.rpm Red Hat Upgrade vnc-server-3.3.3r2-18.4.alpha.rpm ftp://updates.redhat.com/7.1/en/os/alpha/vnc-server-3.3.3r2-18.4.alpha.rpm Red Hat Upgrade vnc-3.3.3r2-18.4.i386.rpm ftp://updates.redhat.com/7.1/en/os/i386/vnc-3.3.3r2-18.4.i386.rpm Red Hat Upgrade vnc-doc-3.3.3r2-18.4.i386.rpm ftp://updates.redhat.com/7.1/en/os/i386/vnc-doc-3.3.3r2-18.4.i386.rpm Red Hat Upgrade vnc-server-3.3.3r2-18.4.i386.rpm ftp://updates.redhat.com/7.1/en/os/i386/vnc-server-3.3.3r2-18.4.i386.rpm Red Hat Upgrade vnc-3.3.3r2-18.4.src.rpm ftp://updates.redhat.com/7.2/en/os/SRPMS/vnc-3.3.3r2-18.4.src.rpm Source RPM. Red Hat Upgrade vnc-3.3.3r2-18.4.i386.rpm ftp://updates.redhat.com/7.2/en/os/i386/vnc-3.3.3r2-18.4.i386.rpm Red Hat Upgrade vnc-doc-3.3.3r2-18.4.i386.rpm ftp://updates.redhat.com/7.2/en/os/i386/vnc-doc-3.3.3r2-18.4.i386.rpm Red Hat Upgrade vnc-server-3.3.3r2-18.4.i386.rpm ftp://updates.redhat.com/7.2/en/os/i386/vnc-server-3.3.3r2-18.4.i386.rpm 相关信息 参考：http://online.securityfocus.com/advisories/3989 |
