漏洞信息详情

NetWin WebNEWS远程缓冲区溢出漏洞

• CNNVD编号：CNNVD-200205-131
• 危害等级： 高危
  
• CVE编号： CVE-2002-0290
• 漏洞类型： 缓冲区溢出
• 发布时间： 2002-05-31
• 威胁类型： 远程
• 更新时间： 2005-05-02
• 厂        商： netwin
• 漏洞来源： Published by Mark ...

漏洞简介

Netwin WebNews CGI program 1.1版本的Webnews.exe存在缓冲区溢出漏洞。远程攻击者借助超长group参数执行任意代码。

漏洞公告

Updated versions are available: NetWin WebNEWS 1.1 j

• NetWin webnews11k.exe ftp://ftp.netwinsite.com/pub/webnews/webnews11k.exe
• NetWin webnews11k_bsdi4.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_bsdi4.tar.Z
• NetWin webnews11k_freebsd.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_freebsd.tar.Z
• NetWin webnews11k_freebsd3.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_freebsd3.tar.Z
• NetWin webnews11k_freebsd4.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_freebsd4.tar.Z
• NetWin webnews11k_linux.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_linux.tar.Z
• NetWin webnews11k_linuxlibc6.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_linuxlibc6.tar.Z
• NetWin webnews11k_osf.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_osf.tar.Z
• NetWin webnews11k_solaris.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_solaris.tar.Z
• NetWin webnews11k_solarisx86.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_solarisx86.tar.Z

• NetWin webnews11k.exe ftp://ftp.netwinsite.com/pub/webnews/webnews11k.exe
• NetWin webnews11k_bsdi4.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_bsdi4.tar.Z
• NetWin webnews11k_freebsd.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_freebsd.tar.Z
• NetWin webnews11k_freebsd3.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_freebsd3.tar.Z
• NetWin webnews11k_freebsd4.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_freebsd4.tar.Z
• NetWin webnews11k_linux.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_linux.tar.Z
• NetWin webnews11k_linuxlibc6.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_linuxlibc6.tar.Z
• NetWin webnews11k_osf.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_osf.tar.Z
• NetWin webnews11k_solaris.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_solaris.tar.Z
• NetWin webnews11k_solarisx86.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_solarisx86.tar.Z

• NetWin webnews11k.exe ftp://ftp.netwinsite.com/pub/webnews/webnews11k.exe
• NetWin webnews11k_bsdi4.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_bsdi4.tar.Z
• NetWin webnews11k_freebsd.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_freebsd.tar.Z
• NetWin webnews11k_freebsd3.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_freebsd3.tar.Z
• NetWin webnews11k_freebsd4.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_freebsd4.tar.Z
• NetWin webnews11k_linux.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_linux.tar.Z
• NetWin webnews11k_linuxlibc6.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_linuxlibc6.tar.Z
• NetWin webnews11k_osf.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_osf.tar.Z
• NetWin webnews11k_solaris.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_solaris.tar.Z
• NetWin webnews11k_solarisx86.tar.Z ftp://ftp.netwinsite.com/pub/webnews/webnews11k_solarisx86.tar.Z

参考网址

来源: BUGTRAQ 名称: 20020218 Netwin Webnews Buffer Overflow Vulnerability (#NISR18022002) 链接:http://marc.theaimsgroup.com/?l=bugtraq&m=101413521417638&w=2 来源: netwinsite.com 链接:ftp://netwinsite.com/pub/webnews/beta/webnews11m_solaris.tar.Z 来源: BID 名称: 4124 链接:http://www.securityfocus.com/bid/4124 来源: XF 名称: webnews-cgi-group-bo(8220) 链接:http://www.iss.net/security_center/static/8220.php

受影响实体

• Netwin Webnews:1.1i  
• Netwin Webnews:1.1j  
• Netwin Webnews:1.1h  

补丁

暂无