Linux Kernel 2.4.18存在安全漏洞发布时间：2002-08-29 更新时间：2002-08-29 严重程度：中 威胁程度：权限提升 错误类型：设计错误 利用方式：服务器模式 BUGTRAQ ID：5539 受影响系统 Linux kernel 2.4.18 pre-8详细描述 Red Hat的安全报告中声明LINUX KERNEL 2.4.18版本存在漏洞，问题相关于下列设备驱动程序： stradis rio500 se401 usbvideo apm 其次，PROCFS虚拟文件系统也存在问题，可导致内核内存泄露，本地攻击者可以利用这个漏洞进行权限提升攻击。 测试代码 无 解决方案 升级内核： Linux kernel 2.4.18 pre-8: Linux kernel 2.4.18 pre-7: Linux kernel 2.4.18 pre-6: Linux kernel 2.4.18 pre-5: Linux kernel 2.4.18 pre-4: Linux kernel 2.4.18 pre-3: Linux kernel 2.4.18 pre-2: Linux kernel 2.4.18 pre-1: Linux kernel 2.4.18: Red Hat RPM kernel-2.4.18-10.src.rpm ftp://updates.redhat.com/7.3/en/os/SRPMS/kernel-2.4.18-10.src.rpm Source RPM. Red Hat RPM kernel-2.4.18-10.athlon.rpm ftp://updates.redhat.com/7.3/en/os/athlon/kernel-2.4.18-10.athlon.rpm Optimized for Athlon systems. Red Hat RPM kernel-smp-2.4.18-10.athlon.rpm ftp://updates.redhat.com/7.3/en/os/athlon/kernel-smp-2.4.18-10.athlon.rpm Optimized for SMP Athlon systems. Red Hat RPM kernel-2.4.18-10.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/kernel-2.4.18-10.i386.rpm Optimized for i386 systems. Red Hat RPM kernel-source-2.4.18-10.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/kernel-source-2.4.18-10.i386.rpm Red Hat RPM kernel-doc-2.4.18-10.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/kernel-doc-2.4.18-10.i386.rpm Red Hat RPM kernel-BOOT-2.4.18-10.i386.rpm ftp://updates.redhat.com/7.3/en/os/i386/kernel-BOOT-2.4.18-10.i386.rpm Red Hat RPM kernel-2.4.18-10.i586.rpm ftp://updates.redhat.com/7.3/en/os/i586/kernel-2.4.18-10.i586.rpm Optimized for i586 systems. Red Hat RPM kernel-smp-2.4.18-10.i586.rpm ftp://updates.redhat.com/7.3/en/os/i586/kernel-smp-2.4.18-10.i586.rpm Optimized for SMP i586 systems. Red Hat RPM kernel-2.4.18-10.i686.rpm ftp://updates.redhat.com/7.3/en/os/i686/kernel-2.4.18-10.i686.rpm Optimized for i686 systems. Red Hat RPM kernel-smp-2.4.18-10.i686.rpm ftp://updates.redhat.com/7.3/en/os/i686/kernel-smp-2.4.18-10.i686.rpm Optimized for SMP i686 systems. Red Hat RPM kernel-bigmem-2.4.18-10.i686.rpm ftp://updates.redhat.com/7.3/en/os/i686/kernel-bigmem-2.4.18-10.i686.rpm Additional package for i686 systems. Red Hat RPM kernel-debug-2.4.18-10.i686.rpm ftp://updates.redhat.com/7.3/en/os/i686/kernel-debug-2.4.18-10.i686.rpm Additional package for i686 systems. 相关信息 Silvio Cesare, Stas Sergeev, Andi Kleen and Solar Designer 参考：http://online.securityfocus.com/advisories/4412 |
