SGI IRIX名字服务守护进程LDAP用户口令绕过漏洞发布时间：2003-05-25 更新时间：2003-05-25 严重程度：高 威胁程度：远程非授权文件存取 错误类型：设计错误 利用方式：服务器模式 BUGTRAQ ID：7442 CVE(CAN) ID：CAN-2003-0174 受影响系统 SGI IRIX 6.5详细描述 SGI IRIX的LDAP实现没有正确处理来自其他LDAP服务的某些属性，这可能导致远程用户获得对服务器的非法访问。 解决方案 厂商已经提供了补丁： SGI IRIX 6.5.15 m: SGI Patch patch5063.tar ftp://patches.sgi.com/support/free/security/patches/6.5.15/patch5063.tar SGI IRIX 6.5.15 f: SGI Patch patch5063.tar ftp://patches.sgi.com/support/free/security/patches/6.5.15/patch5063.tar SGI IRIX 6.5.15: SGI Patch patch5063.tar ftp://patches.sgi.com/support/free/security/patches/6.5.15/patch5063.tar SGI IRIX 6.5.16 m: SGI Patch patch5063.tar ftp://patches.sgi.com/support/free/security/patches/6.5.15/patch5063.tar SGI IRIX 6.5.16 f: SGI Patch patch5063.tar ftp://patches.sgi.com/support/free/security/patches/6.5.15/patch5063.tar SGI IRIX 6.5.16: SGI Patch patch5063.tar ftp://patches.sgi.com/support/free/security/patches/6.5.15/patch5063.tar SGI IRIX 6.5.17 m: SGI Patch patch5063.tar ftp://patches.sgi.com/support/free/security/patches/6.5.15/patch5063.tar SGI IRIX 6.5.17 f: SGI Patch patch5063.tar ftp://patches.sgi.com/support/free/security/patches/6.5.15/patch5063.tar SGI IRIX 6.5.17: SGI Patch patch5063.tar ftp://patches.sgi.com/support/free/security/patches/6.5.15/patch5063.tar SGI IRIX 6.5.18 m: SGI Patch patch5063.tar ftp://patches.sgi.com/support/free/security/patches/6.5.15/patch5063.tar SGI IRIX 6.5.18 f: SGI Patch patch5063.tar ftp://patches.sgi.com/support/free/security/patches/6.5.15/patch5063.tar SGI IRIX 6.5.18: SGI Patch patch5063.tar ftp://patches.sgi.com/support/free/security/patches/6.5.15/patch5063.tar SGI IRIX 6.5.19 m: SGI Patch patch5063.tar ftp://patches.sgi.com/support/free/security/patches/6.5.15/patch5063.tar SGI IRIX 6.5.19 f: SGI Patch patch5063.tar ftp://patches.sgi.com/support/free/security/patches/6.5.15/patch5063.tar SGI IRIX 6.5.19: SGI Patch patch5063.tar ftp://patches.sgi.com/support/free/security/patches/6.5.15/patch5063.tar 相关信息 20030407-01-P: Vulnerability in nsd LDAP Implementation http://online.securityfocus.com/advisories/5324 |
