漏洞信息详情

Mah-Jong服务器空指针引用远程服务拒绝漏洞

• CNNVD编号：CNNVD-200409-067
• 危害等级： 低危
  
• CVE编号： CVE-2004-0458
• 漏洞类型： 输入验证
• 发布时间： 2004-09-28
• 威胁类型： 远程
• 更新时间： 2005-10-20
• 厂        商： nicolas_boullis
• 漏洞来源： This issue was dis...

漏洞简介

mah-jong 1.6.2之前版本存在漏洞。远程攻击者可以借助丢失的参数导致服务拒绝（服务器崩溃），该漏洞引起空指针引用。

漏洞公告

Debian have released an advisory (DSA 503-1), which contains fixes to address this issue. Affected users are advised to upgrade as soon as possible. Further details regarding applying fixes are available in the referenced advisory. Nicolas Boullis Mah-Jong 1.4

• Debian mah-jong_1.4-3_alpha.debDebian GNU/Linux 3.0 (woody) http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3 _alpha.deb
• Debian mah-jong_1.4-3_arm.debDebian GNU/Linux 3.0 (woody) http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3 _arm.deb
• Debian mah-jong_1.4-3_hppa.debDebian GNU/Linux 3.0 (woody) http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3 _hppa.deb
• Debian mah-jong_1.4-3_i386.debDebian GNU/Linux 3.0 (woody) http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3 _i386.deb
• Debian mah-jong_1.4-3_ia64.debDebian GNU/Linux 3.0 (woody) http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3 _ia64.deb
• Debian mah-jong_1.4-3_m68k.debDebian GNU/Linux 3.0 (woody) http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3 _m68k.deb
• Debian mah-jong_1.4-3_mips.debDebian GNU/Linux 3.0 (woody) http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3 _mips.deb
• Debian mah-jong_1.4-3_mipsel.debDebian GNU/Linux 3.0 (woody) http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3 _mipsel.deb
• Debian mah-jong_1.4-3_powerpc.debDebian GNU/Linux 3.0 (woody) http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3 _powerpc.deb
• Debian mah-jong_1.4-3_s390.debDebian GNU/Linux 3.0 (woody) http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3 _s390.deb
• Debian mah-jong_1.4-3_sparc.debDebian GNU/Linux 3.0 (woody) http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3 _sparc.deb

参考网址

来源: XF 名称: mah-jong-null-dos(16143) 链接:http://xforce.iss.net/xforce/xfdb/16143 来源: BID 名称: 10343 链接:http://www.securityfocus.com/bid/10343 来源: DEBIAN 名称: DSA-503 链接:http://www.debian.org/security/2004/dsa-503

受影响实体

• Nicolas_boullis Mah-Jong:1.4  
• Nicolas_boullis Mah-Jong:1.6  

补丁

暂无