IBM DB2 db2ckpw存在缓冲溢出漏洞发布时间：2002-05-28 更新时间：2002-05-28 严重程度：高 威胁程度：本地管理员权限 错误类型：边界检查错误 利用方式：服务器模式 BUGTRAQ ID：4817 受影响系统 IBM DB2 Universal Database for AIX 6.0详细描述 IBM DB2包含'db2ckpw'工具用于验证，默认以setuid root方式安装。 其中'db2ckpw'存在缓冲溢出漏洞，攻击者可以通过提交超长的用户名来触发，这是普通的堆栈溢出，可导致攻击者获得本地ROOT权限。 测试代码 尚无 解决方案 采用如下补丁： IBM DB2 Universal Database for AIX 6.0: IBM Hotfix FP10_U482111 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2aixv61/FP10_U482111/ FixPack 10 for DB2 V6 for AIX. IBM DB2 Universal Database for HP-UX 6.0: IBM Hotfix FP10_U482113 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2hp10v61/FP10_U482113/ FixPack 10 for DB2 V6 for HP-UX 10.x. IBM Hotfix FP10_U482114 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2hp11v61/FP10_U482114/ FixPack 10 for DB2 V6 for HP-UX 11.x. IBM DB2 Universal Database for Linux 6.0: IBM Hotfix FP10_IP22471 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2linuxv61/FP10_IP22471/ FixPack 10 for DB2 V6 for Linux. IBM DB2 Universal Database for Solaris 6.0: IBM Hotfix FP10_U482112 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2sunv61/FP10_U482112/ FixPack 10 for DB2 V6 for Solaris. IBM DB2 Universal Database for Linux 6.1: IBM Hotfix FP10_IP22471 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2linuxv61/FP10_IP22471/ FixPack 10 for DB2 V6 for Linux. IBM DB2 Universal Database for HP-UX 6.1: IBM Hotfix FP10_U482113 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2hp10v61/FP10_U482113/ FixPack 10 for DB2 V6 for HP-UX 10.x. IBM Hotfix FP10_U482114 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2hp11v61/FP10_U482114/ FixPack 10 for DB2 V6 for HP-UX 11.x. IBM DB2 Universal Database for Solaris 6.1: IBM Hotfix FP10_U482112 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2sunv61/FP10_U482112/ FixPack 10 for DB2 V6 for Solaris. IBM DB2 Universal Database for AIX 6.1: IBM Hotfix FP10_U482111 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2aixv61/FP10_U482111/ FixPack 10 for DB2 V6 for AIX. IBM DB2 Universal Database for AIX 7.0: IBM Hotfix FP6_U481406 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2aixv7/FP6_U481406/ FixPack 6 for DB2 V7 for AIX. IBM Hotfix FP6_U481407 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2aix43-64v7/FP6_U481407/ FixPack 6 for DB2 V7 for AIX43-64. IBM Hotfix FP6_U481408 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2aix5-64v7/FP6_U481408/ FixPack 6 for DB2 V7 for AIX5-64. IBM DB2 Universal Database for Linux 7.0: IBM Hotfix FP6_U481413 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2linuxv7/FP6_U481413/ FixPack 6 for DB2 V7 for Linux. IBM APAR FP6_MI00038 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2linux390v7/FP6_MI00038/ FixPack 6 for DB2 V7 for Linux390. IBM DB2 Universal Database for HP-UX 7.0: IBM Hotfix FP6_U481411 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2hpv7/FP6_U481411/ FixPack 6 for DB2 V7 for HP-UX 11.x. IBM Hotfix FP6_U481412 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2hp64v7/FP6_U481412/ FixPack 6 for DB2 V7 for HP64. IBM DB2 Universal Database for Solaris 7.0: IBM Hotfix FP6_U481409 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2sunv7/FP6_U481409/ FixPack 6 for DB2 V7 for Solaris. IBM Hotfix FP6_U481410 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2sun64v7/FP6_U481410/ FixPack 6 for DB2 V7 for Solaris (64-bit). IBM DB2 Universal Database for Solaris 7.1: IBM Hotfix FP6_U481409 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2sunv7/FP6_U481409/ FixPack 6 for DB2 V7 for Solaris. IBM Hotfix FP6_U481410 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2sun64v7/FP6_U481410/ FixPack 6 for DB2 V7 for Solaris (64-bit). IBM DB2 Universal Database for Linux 7.1: IBM Hotfix FP6_U481413 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2linuxv7/FP6_U481413/ FixPack 6 for DB2 V7 for Linux. IBM APAR FP6_MI00038 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2linux390v7/FP6_MI00038/ FixPack 6 for DB2 V7 for Linux390. IBM DB2 Universal Database for HP-UX 7.1: IBM Hotfix FP6_U481411 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2hpv7/FP6_U481411/ FixPack 6 for DB2 V7 for HP-UX 11.x. IBM Hotfix FP6_U481412 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2hp64v7/FP6_U481412/ FixPack 6 for DB2 V7 for HP64. IBM DB2 Universal Database for AIX 7.1: IBM Hotfix FP6_U481406 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2aixv7/FP6_U481406/ FixPack 6 for DB2 V7 for AIX. IBM Hotfix FP6_U481407 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2aix43-64v7/FP6_U481407/ FixPack 6 for DB2 V7 for AIX43-64. IBM Hotfix FP6_U481408 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2aix5-64v7/FP6_U481408/ FixPack 6 for DB2 V7 for AIX5-64. IBM DB2 Universal Database for AIX 7.2: IBM Hotfix FP6_U481406 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2aixv7/FP6_U481406/ FixPack 6 for DB2 V7 for AIX. IBM Hotfix FP6_U481407 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2aix43-64v7/FP6_U481407/ FixPack 6 for DB2 V7 for AIX43-64. IBM Hotfix FP6_U481408 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2aix5-64v7/FP6_U481408/ FixPack 6 for DB2 V7 for AIX5-64. IBM DB2 Universal Database for Linux 7.2: IBM Hotfix FP6_U481413 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2linuxv7/FP6_U481413/ FixPack 6 for DB2 V7 for Linux. IBM APAR FP6_MI00038 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2linux390v7/FP6_MI00038/ FixPack 6 for DB2 V7 for Linux390. IBM DB2 Universal Database for HP-UX 7.2: IBM Hotfix FP6_U481411 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2hpv7/FP6_U481411/ FixPack 6 for DB2 V7 for HP-UX 11.x. IBM Hotfix FP6_U481412 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2hp64v7/FP6_U481412/ FixPack 6 for DB2 V7 for HP64. IBM DB2 Universal Database for Solaris 7.2: IBM Hotfix FP6_U481409 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2sunv7/FP6_U481409/ FixPack 6 for DB2 V7 for Solaris. IBM Hotfix FP6_U481410 ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/db2sun64v7/FP6_U481410/ FixPack 6 for DB2 V7 for Solaris (64-bit). 相关信息 参考：IBM Security Advisory MSS-OAR-E01-2002:318.1. http://www-3.ibm.com/cgi-bin/db2www/data/db2/udb/winos2unix/support/download.d2w/report |
