|
|
Imlib NetPBM库存在漏洞
发布时间：2002-03-25
更新时间：2002-03-25
严重程度：中
威胁程度：权限提升
错误类型：环境错误
利用方式：服务器模式
BUGTRAQ ID：4339
受影响系统Imlib Imlib 1.9
Imlib Imlib 1.9.1
Imlib Imlib 1.9.2
Imlib Imlib 1.9.3
Imlib Imlib 1.9.4
Imlib Imlib 1.9.5
Imlib Imlib 1.9.6
Imlib Imlib 1.9.7
Imlib Imlib 1.9.8
+ RedHat Linux 6.2
+ RedHat Linux 7.0
+ RedHat Linux 7.1
Imlib Imlib 1.9.9
Imlib Imlib 1.9.10
+ RedHat Linux 7.2
Imlib Imlib 1.9.11
Imlib Imlib 1.9.12 详细描述
Imlib是允许X11程序使用各种文件格式图象的库。
NETPBM不适应处理不信任图象输入，可以通过使用lmlib库的应用程序进行攻击。而库本身不能被利用。
测试代码
尚无
解决方案
Red Hat 已经推出补丁程序：
Imlib Imlib 1.9:
Imlib Imlib 1.9.1:
Imlib Imlib 1.9.2:
Imlib Imlib 1.9.3:
Imlib Imlib 1.9.4:
Imlib Imlib 1.9.5:
Imlib Imlib 1.9.6:
Imlib Imlib 1.9.7:
Imlib Imlib 1.9.8:
Red Hat RPM imlib-cfgeditor-1.9.13-2.6.x.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/imlib-cfgeditor-1.9.13-2.6.x.alpha.rpm
Red Hat RPM imlib-devel-1.9.13-2.6.x.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/imlib-devel-1.9.13-2.6.x.alpha.rpm
Red Hat RPM imlib-cfgeditor-1.9.13-2.6.x.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/imlib-cfgeditor-1.9.13-2.6.x.i386.rpm
Red Hat RPM imlib-devel-1.9.13-2.6.x.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/imlib-devel-1.9.13-2.6.x.i386.rpm
Red Hat RPM imlib-cfgeditor-1.9.13-2.6.x.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/imlib-cfgeditor-1.9.13-2.6.x.sparc.rpm
Red Hat RPM imlib-devel-1.9.13-2.6.x.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/imlib-devel-1.9.13-2.6.x.sparc.rpm
Red Hat RPM imlib-1.9.13-2.7.x.src.rpm
ftp://updates.redhat.com/7.0/en/os/SRPMS/imlib-1.9.13-2.7.x.src.rpm
Source RPM.
Red Hat RPM imlib-1.9.13-2.7.x.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/imlib-1.9.13-2.7.x.alpha.rpm
Red Hat RPM imlib-devel-1.9.13-2.7.x.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/imlib-devel-1.9.13-2.7.x.alpha.rpm
Red Hat RPM imlib-1.9.13-2.7.x.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/imlib-1.9.13-2.7.x.i386.rpm
Red Hat RPM imlib-cfgeditor-1.9.13-2.7.x.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/imlib-cfgeditor-1.9.13-2.7.x.i386.rpm
Red Hat RPM imlib-devel-1.9.13-2.7.x.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/imlib-devel-1.9.13-2.7.x.i386.rpm
Red Hat RPM imlib-1.9.13-2.7.x.src.rpm
ftp://updates.redhat.com/7.1/en/os/SRPMS/imlib-1.9.13-2.7.x.src.rpm
Source RPM.
Red Hat RPM imlib-1.9.13-2.7.x.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/imlib-1.9.13-2.7.x.alpha.rpm
Red Hat RPM imlib-cfgeditor-1.9.13-2.7.x.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/imlib-cfgeditor-1.9.13-2.7.x.alpha.rpm
Red Hat RPM imlib-devel-1.9.13-2.7.x.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/imlib-devel-1.9.13-2.7.x.alpha.rpm
Red Hat RPM imlib-1.9.13-2.7.x.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/imlib-1.9.13-2.7.x.i386.rpm
Red Hat RPM imlib-cfgeditor-1.9.13-2.7.x.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/imlib-cfgeditor-1.9.13-2.7.x.i386.rpm
Red Hat RPM imlib-devel-1.9.13-2.7.x.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/imlib-devel-1.9.13-2.7.x.i386.rpm
Red Hat RPM imlib-1.9.13-2.7.x.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/imlib-1.9.13-2.7.x.ia64.rpm
Red Hat RPM imlib-cfgeditor-1.9.13-2.7.x.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/imlib-cfgeditor-1.9.13-2.7.x.ia64.rpm
Red Hat RPM imlib-devel-1.9.13-2.7.x.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/imlib-devel-1.9.13-2.7.x.ia64.rpm
Imlib Imlib 1.9.9:
Imlib Imlib 1.9.10:
Red Hat RPM imlib-devel-1.9.13-2.7.x.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/imlib-devel-1.9.13-2.7.x.i386.rpm
Red Hat RPM imlib-devel-1.9.13-2.7.x.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/imlib-devel-1.9.13-2.7.x.ia64.rpm
Red Hat RPM imlib-1.9.13-2.7.x.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/imlib-1.9.13-2.7.x.i386.rpm
Red Hat RPM imlib-1.9.13-2.7.x.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/imlib-1.9.13-2.7.x.ia64.rpm
Red Hat RPM imlib-1.9.13-2.7.x.src.rpm
ftp://updates.redhat.com/7.2/en/os/SRPMS/imlib-1.9.13-2.7.x.src.rpm
Source RPM.
Red Hat RPM imlib-cfgeditor-1.9.13-2.7.x.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/imlib-cfgeditor-1.9.13-2.7.x.i386.rpm
Red Hat RPM imlib-cfgeditor-1.9.13-2.7.x.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/imlib-cfgeditor-1.9.13-2.7.x.ia64.rpm
相关信息
参考：http://online.securityfocus.com/advisories/3987
|
