发布日期：2006-01-09
更新日期：2006-01-09

受影响系统：

NetBSD NetBSD 2.1
NetBSD NetBSD 2.0.3
NetBSD NetBSD 2.0.2
NetBSD NetBSD 2.0.1
NetBSD NetBSD 2.0
NetBSD NetBSD 1.6.2
NetBSD NetBSD 1.6.1
NetBSD NetBSD 1.6 beta
NetBSD NetBSD 1.6

不受影响系统：

NetBSD NetBSD 3.0

描述：

---

BUGTRAQ  ID: 16173

NetBSD是一款免费开放源代码的UNIX性质的操作系统。

NetBSD对kernfs文件系统的lseek(2)系统调用没有正确的验证文件偏移，这样允许用户级非特权进程读取任意kernel内存位置，导致泄漏敏感信息。

<*来源：Ejovi Nuwere （SLAB_research@securitylab.net）
  
  链接：ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-001.txt.asc
*>

建议：

---

厂商补丁：

NetBSD
------
NetBSD已经为此发布了一个安全公告（NetBSD-SA2006-001）以及相应补丁:
NetBSD-SA2006-001：Kernfs kernel memory disclosure
链接：ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-001.txt.asc

补丁下载：

NetBSD NetBSD 1.6
* NetBSD SA2003-011-realpath.patch
ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2003-011-realpath.patch
    
* NetBSD uvm_swap.c patch
http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/uvm/uvm_swap.c.diff?r1=1.85&r2=1.85.2.1
    
NetBSD NetBSD 1.6 beta
* NetBSD SA2002-007-tiocsctty.patch
ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2002-007-tiocsctty.patch
    
* NetBSD uvm_swap.c patch
http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/uvm/uvm_swap.c.diff?r1=1.85&r2=1.85.2.1
    
NetBSD NetBSD 1.6.1
* NetBSD SA2003-011-realpath.patch
ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2003-011-realpath.patch
    
* NetBSD ARCH-kernel.tgz
ftp://ftp.netbsd.org/pub/NetBSD/security/patches/SA2004-002-kernel/netbsd-1-6/ARCH-kernel.tgz
    
* NetBSD uvm_swap.c patch
http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/uvm/uvm_swap.c.diff?r1=1.85&r2=1.85.2.1
    
NetBSD NetBSD 1.6.2
* NetBSD uvm_swap.c patch
http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/uvm/uvm_swap.c.diff?r1=1.85&r2=1.85.2.1

NetBSD NetBSD 2.0
* NetBSD uvm_swap.c patch
http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/uvm/uvm_swap.c.diff?r1=1.85&r2=1.85.2.1
    
* KAME ah_aesxcbcmac.c.diff
http://www.kame.net/dev/cvsweb2.cgi/kame/kame/sys/netinet6/ah_aesxcbcmac.c.diff?r1=1.7&r2=1.8
    
NetBSD NetBSD 2.0.1
* KAME ah_aesxcbcmac.c.diff
http://www.kame.net/dev/cvsweb2.cgi/kame/kame/sys/netinet6/ah_aesxcbcmac.c.diff?r1=1.7&r2=1.8
    
NetBSD NetBSD 2.0.2
* KAME ah_aesxcbcmac.c.diff
http://www.kame.net/dev/cvsweb2.cgi/kame/kame/sys/netinet6/ah_aesxcbcmac.c.diff?r1=1.7&r2=1.8

浏览次数：3246
严重程度：0（网友投票）