绿盟安全月刊->第12期->最新漏洞 RedHat Linux gpm存在多个安全漏洞

日期：2000-08-15

受影响的系统:  
Red Hat Linux 5.2 - i386, alpha, sparc
Red Hat Linux 6.0 - i386, alpha, sparc
Red Hat Linux 6.1 - i386, alpha, sparc
Red Hat Linux 6.2 - i386, alpha, sparc
描述:
--------------------------------------------------------------------------------


RedHat 所带的gpm软件包中存在两个安全问题。可能导致非法获取更高权限或者拒绝服务攻击

1. gpm-root程序中没有对setgid调用的返回值进行全面的检查。这导致本地普通用户可能
窃取更高的组权限。

2. /dev/gpmctl缺省允许非控制台用户写入。用户可能通过flood这个socket来
造成拒绝服务攻击。

<* 来源：Red Hat, Inc. Security Advisory:  RHSA-2000:045-01 *>





--------------------------------------------------------------------------------
建议:
RedHat 已经发布了相应的补丁程序(RH5.2,RH6.2)：

Red Hat Linux 5.2:

sparc:
ftp://updates.redhat.com/5.2/sparc/gpm-1.19.3-0.5.x.sparc.rpm

alpha:
ftp://updates.redhat.com/5.2/alpha/gpm-1.19.3-0.5.x.alpha.rpm

i386:
ftp://updates.redhat.com/5.2/i386/gpm-1.19.3-0.5.x.i386.rpm

sources:
ftp://updates.redhat.com/5.2/SRPMS/gpm-1.19.3-0.5.x.src.rpm

Red Hat Linux 6.2:

sparc:
ftp://updates.redhat.com/6.2/sparc/gpm-1.19.3-0.6.x.sparc.rpm

i386:
ftp://updates.redhat.com/6.2/i386/gpm-1.19.3-0.6.x.i386.rpm

alpha:
ftp://updates.redhat.com/6.2/alpha/gpm-1.19.3-0.6.x.alpha.rpm

sources:
ftp://updates.redhat.com/6.2/SRPMS/gpm-1.19.3-0.6.x.src.rpm

校验和表:

MD5 sum                           Package Name
--------------------------------------------------------------------------
7e14aa2b98ababfe815b292ff8439b50  5.2/SRPMS/gpm-1.19.3-0.5.x.src.rpm
668c1dd35c9e28cd54c34aed0126afe9  5.2/alpha/gpm-1.19.3-0.5.x.alpha.rpm
6e5ae7e9d4f552978d4821fe5e06e27b  5.2/i386/gpm-1.19.3-0.5.x.i386.rpm
13be2dda7373cbb90567b11dca1e8a76  5.2/sparc/gpm-1.19.3-0.5.x.sparc.rpm
8205248615a5e249e3612753ec7d7c08  6.2/SRPMS/gpm-1.19.3-0.6.x.src.rpm
1750a3ba1ff2094e9e77bcaac8ece826  6.2/alpha/gpm-1.19.3-0.6.x.alpha.rpm
0dd38c9d324a9e82ab8aceb75394a94e  6.2/i386/gpm-1.19.3-0.6.x.i386.rpm
274dfea2fffb8dc6785686409ba3f37a  6.2/sparc/gpm-1.19.3-0.6.x.sparc.rpm