漏洞信息详情

Hashcash hashcash.c array_push函数 远程数据堆缓冲区溢出漏洞

• CNNVD编号：CNNVD-200606-512
• 危害等级： 高危
  
• CVE编号： CVE-2006-3251
• 漏洞类型： 缓冲区溢出
• 发布时间： 2006-06-27
• 威胁类型： 远程
• 更新时间： 2006-07-28
• 厂        商： hashcash
• 漏洞来源： .');">Discovery is credi...

漏洞简介

Hashcash 1.21之前版本的hashcash.c中array_push函数内基于数据堆的缓冲区溢出，可能让远程攻击者通过特制的条目执行任意代码。

漏洞公告

目前厂商已经发布了相关补丁，请到厂商的主页下载：

Hashcash Hashcash 1.19

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.20

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.18

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.0 6

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.0 4

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.0

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.0 5

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.0 9

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.0 2

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.0 7

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.0 8

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.0 1

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.0 3

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.10

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.11

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.12

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.13

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.14

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.15

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.16

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

Hashcash Hashcash 1.17

Hashcash hashcash-1.21.tgz

http://hashcash.org/source/hashcash-1.21.tgz

参考网址

来源: BID

名称: 18659

链接:http://www.securityfocus.com/bid/18659

来源: XF

名称: hashcash-arraypush-bo(27422)

链接:http://xforce.iss.net/xforce/xfdb/27422

来源: www.hashcash.org

链接:http://www.hashcash.org/source/CHANGELOG

来源: GENTOO

名称: GLSA-200606-25

链接:http://www.gentoo.org/security/en/glsa/glsa-200606-25.xml

来源: VUPEN

名称: ADV-2006-2551

链接:http://www.frsirt.com/english/advisories/2006/2551

来源: DEBIAN

名称: DSA-1114

链接:http://www.debian.org/security/2006/dsa-1114

来源: SECUNIA

名称: 21146

链接:http://secunia.com/advisories/21146

来源: SECUNIA

名称: 20846

链接:http://secunia.com/advisories/20846

来源: SECUNIA

名称: 20800

链接:http://secunia.com/advisories/20800

受影响实体

• Hashcash Hashcash:1.00  
• Hashcash Hashcash:1.01  
• Hashcash Hashcash:1.02  
• Hashcash Hashcash:1.03  
• Hashcash Hashcash:1.04  

补丁

暂无