首页 -> 安全研究

安全研究

绿盟月刊
绿盟安全月刊->第42期->最新漏洞
期刊号: 类型: 关键词:
多个Sun数据库函数缓冲区溢出漏洞

日期:2003-07-02

发布日期:2003-06-20
更新日期:2003-06-27

受影响系统:
Sun Solaris 9.0_x86
Sun Solaris 9.0
Sun Solaris 8.0_x86
Sun Solaris 8.0
Sun Solaris 7.0_x86
Sun Solaris 7.0
Sun Solaris 2.6_x86
Sun Solaris 2.6
描述:
--------------------------------------------------------------------------------
BUGTRAQ  ID: 7991

Solaris是一款由Sun Microsystems公司开发和维护的商业性质UNIX操作系统。

Sun的dbm_open()、ndbm()、dbm()和dbminit()库函数缺少正确的缓冲区边界检查,攻击者可以利用这些漏洞进行缓冲区溢出攻击,可以root权限在系统上执行任意指令。

这些数据库函数在拷贝外部数据到内部内存缓冲区时存在问题,提供过多的数据可导致破坏内存敏感信息。Solaris Xsun应用程序就链接有此漏洞的库,精心利用此漏洞可能以root权限在系统上执行任意指令。

<*来源:Sun(sm) Alert Notification
  
  链接:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55420
*>

建议:
--------------------------------------------------------------------------------
厂商补丁:

Sun
---
目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:

SPARC Platform

Solaris 2.6:

patche 105210-47

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105210&rev=47

patche 105377-06

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105377&rev=06

patche 105401-43  

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105401&rev=43

Solaris 7:

patche 106541-22

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106541&rev=22

patche 106942-26

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106541&rev=22

patche 106949-03

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106949&rev=03

Solaris 8

Patch 108827-24

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108827&rev=24

Patch 108993-16

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108993&rev=16

Patch 109152-02

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=109152&rev=02

Solari 9

Patch 112874-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112874&rev=01

Patch 112922-02

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112922&rev=02

Patch 112922-02

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112922&rev=02

Patch 113319-10

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=113319&rev=10

Patch 114569-02

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114569&rev=02

Patch 114571-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114571&rev=01

x86 Platform

Solaris 2.6

patche 105211-49

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105211&rev=49

patche 105402-43

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105402&rev=43

Solaris 7

patche 106542-22

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106542&rev=22

patche 106943-26

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106943&rev=26

patche 108828-25

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108828&rev=25

patche 108994-16

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108994&rev=16

patche 114617-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114617&rev=01

Solaris 9

patche 113719-03

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=113719&rev=03

patche 114570-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114570&rev=01

patche 114715-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114715&rev=01
版权所有,未经许可,不得转载