|
|
Canna Server本地缓冲区溢出漏洞
发布时间：2002-12-10
更新时间：2002-12-10
严重程度：高
威胁程度：本地管理员权限
错误类型：边界检查错误
利用方式：客户机模式
BUGTRAQ ID：6351
CVE(CAN) ID：CAN-2002-1158
受影响系统Canna Canna 3.5 b2
-RedHat Linux 7.1
-RedHat Linux 7.2
-RedHat Linux 7.3
-RedHat Linux 8.0 详细描述
Canna server存在一个缓冲区溢出漏洞，本地攻击者可以利用这个漏洞以"bin"的权限执行任意代码。
当日本语言支持启用时Canna才被安装。
测试代码
无
解决方案
Canna Canna 3.5 b2:
RedHat RPM Canna-3.5b2-42.7.1.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/Canna-3.5b2-42.7.1.alpha.rpm
RedHat RPM Canna-3.5b2-42.7.1.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/Canna-3.5b2-42.7.1.i386.rpm
RedHat RPM Canna-3.5b2-42.7.1.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/Canna-3.5b2-42.7.1.ia64.rpm
RedHat RPM Canna-3.5b2-50.7.2.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/Canna-3.5b2-50.7.2.i386.rpm
RedHat RPM Canna-3.5b2-50.7.2.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/Canna-3.5b2-50.7.2.ia64.rpm
RedHat RPM Canna-3.5b2-62.7.3.i386.rpm
ftp://updates.redhat.com/7.3/en/os/i386/Canna-3.5b2-62.7.3.i386.rpm
RedHat RPM Canna-3.5b2-70.8.0.1.i386.rpm
ftp://updates.redhat.com/8.0/en/os/i386/Canna-3.5b2-70.8.0.1.i386.rpm
RedHat RPM Canna-devel-3.5b2-42.7.1.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/Canna-devel-3.5b2-42.7.1.alpha.rpm
RedHat RPM Canna-devel-3.5b2-42.7.1.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/Canna-devel-3.5b2-42.7.1.i386.rpm
RedHat RPM Canna-devel-3.5b2-42.7.1.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/Canna-devel-3.5b2-42.7.1.ia64.rpm
RedHat RPM Canna-devel-3.5b2-50.7.2.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/Canna-devel-3.5b2-50.7.2.i386.rpm
RedHat RPM Canna-devel-3.5b2-50.7.2.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/Canna-devel-3.5b2-50.7.2.ia64.rpm
RedHat RPM Canna-devel-3.5b2-62.7.3.i386.rpm
ftp://updates.redhat.com/7.3/en/os/i386/Canna-devel-3.5b2-62.7.3.i386.rpm
RedHat RPM Canna-devel-3.5b2-70.8.0.1.i386.rpm
ftp://updates.redhat.com/8.0/en/os/i386/Canna-devel-3.5b2-70.8.0.1.i386.rpm
RedHat RPM Canna-libs-3.5b2-42.7.1.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/Canna-libs-3.5b2-42.7.1.alpha.rpm
RedHat RPM Canna-libs-3.5b2-42.7.1.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/Canna-libs-3.5b2-42.7.1.i386.rpm
RedHat RPM Canna-libs-3.5b2-42.7.1.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/Canna-libs-3.5b2-42.7.1.ia64.rpm
RedHat RPM Canna-libs-3.5b2-50.7.2.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/Canna-libs-3.5b2-50.7.2.i386.rpm
RedHat RPM Canna-libs-3.5b2-50.7.2.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/Canna-libs-3.5b2-50.7.2.ia64.rpm
RedHat RPM Canna-libs-3.5b2-62.7.3.i386.rpm
ftp://updates.redhat.com/7.3/en/os/i386/Canna-libs-3.5b2-62.7.3.i386.rpm
RedHat RPM Canna-libs-3.5b2-70.8.0.1.i386.rpm
ftp://updates.redhat.com/8.0/en/os/i386/Canna-libs-3.5b2-70.8.0.1.i386.rpm
相关信息
发现者：hsj 和 AIDA Shinra
相关资料：http://online.securityfocus.com/advisories/4759
|
