漏洞信息详情

多个Sun数据库函数缓冲区溢出漏洞

• CNNVD编号：CNNVD-200306-111
• 危害等级： 高危
  
• CVE编号： CVE-2003-1067
• 漏洞类型： 边界条件错误
• 发布时间： 2003-06-19
• 威胁类型： 本地
• 更新时间： 2005-10-20
• 厂        商： sun
• 漏洞来源：

漏洞简介

Solaris是一款由Sun Microsystems公司开发和维护的商业性质UNIX操作系统。 Sun的dbm_open()、ndbm()、dbm()和dbminit()库函数缺少正确的缓冲区边界检查，攻击者可以利用这些漏洞进行缓冲区溢出攻击，可以root权限在系统上执行任意指令。 这些数据库函数在拷贝外部数据到内部内存缓冲区时存在问题，提供过多的数据可导致破坏内存敏感信息。Solaris Xsun应用程序就链接有此漏洞的库，精心利用此漏洞可能以root权限在系统上执行任意指令。 ＜*链接：http：//sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert\\%2F55420 *＞

漏洞公告

厂商补丁： Sun --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

SPARC Platform

Solaris 2.6：

patche 105210-47

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105210&rev=47

patche 105377-06

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105377&rev=06

patche 105401-43

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105401&rev=43

Solaris 7:

patche 106541-22

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106541&rev=22

patche 106942-26

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106541&rev=22

patche 106949-03

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106949&rev=03

Solaris 8

Patch 108827-24

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108827&rev=24

Patch 108993-16

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108993&rev=16

Patch 109152-02

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=109152&rev=02

Solari 9

Patch 112874-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112874&rev=01

Patch 112922-02

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112922&rev=02

Patch 112922-02

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112922&rev=02

Patch 113319-10

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=113319&rev=10

Patch 114569-02

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114569&rev=02

Patch 114571-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114571&rev=01

x86 Platform

Solaris 2.6

patche 105211-49

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105211&rev=49

patche 105402-43

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105402&rev=43

Solaris 7

patche 106542-22

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106542&rev=22

patche 106943-26

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106943&rev=26

patche 108828-25

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108828&rev=25

patche 108994-16

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108994&rev=16

patche 114617-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114617&rev=01

Solaris 9

patche 113719-03

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=113719&rev=03

patche 114570-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114570&rev=01

patche 114715-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114715&rev=01

参考网址

来源: XF 名称: sun-database-functions-bo(12379) 链接:http://xforce.iss.net/xforce/xfdb/12379 来源: BID 名称: 7991 链接:http://www.securityfocus.com/bid/7991 来源: CIAC 名称: N-108 链接:http://www.ciac.org/ciac/bulletins/n-108.sHTML 来源: SUNALERT 名称: 55420 链接:http://sunsolve.sun.com/search/document.do?assetkey=1-26-55420-1 来源: SECUNIA 名称: 9088 链接:http://secunia.com/advisories/9088/

受影响实体

• Sun Solaris:2.6  
• Sun Solaris:2.6:X86  
• Sun Solaris:7.0  
• Sun Solaris:7.0:X86  
• Sun Solaris:8.0  

补丁

暂无