漏洞信息详情

Freeciv 'packets.c'远程拒绝服务漏洞

• CNNVD编号：CNNVD-200603-110
• 危害等级： 中危
  
• CVE编号： CVE-2006-0047
• 漏洞类型： 资源管理错误
• 发布时间： 2006-03-07
• 威胁类型： 远程
• 更新时间： 2006-03-14
• 厂        商： freeciv
• 漏洞来源： Discovery of this ...

漏洞简介

在Freeciv 2.0.8之前版本2.0 中存在packets.c，远程攻击者可以通过带负压缩尺寸值的伪数据包，制造拒绝服务(服务器崩溃)。

漏洞公告

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：

Freeciv Freeciv 2.0.4

Mandriva freeciv-client-2.0.4-2.1.20060mdk.i586.rpmMandriva Linux 2006.0:

http://wwwnew.mandriva.com/en/downloads

Mandriva freeciv-client-2.0.4-2.1.20060mdk.x86_64.rpmMandriva Linux 2006.0/X86_64:

http://wwwnew.mandriva.com/en/downloads

Mandriva freeciv-data-2.0.4-2.1.20060mdk.i586.rpmMandriva Linux 2006.0:

http://wwwnew.mandriva.com/en/downloads

Mandriva freeciv-data-2.0.4-2.1.20060mdk.x86_64.rpmMandriva Linux 2006.0/X86_64:

http://wwwnew.mandriva.com/en/downloads

Mandriva freeciv-server-2.0.4-2.1.20060mdk.i586.rpmMandriva Linux 2006.0:

http://wwwnew.mandriva.com/en/downloads

Mandriva freeciv-server-2.0.4-2.1.20060mdk.x86_64.rpmMandriva Linux 2006.0/X86_64:

http://wwwnew.mandriva.com/en/downloads

Freeciv Freeciv 2.0.7

Freeciv freeciv-2.0.8.tar.gz

http://prdownloads.sourceforge.net/freeciv/freeciv-2.0.8.tar.gz

参考网址

来源: BID

名称: 16975

链接:http://www.securityfocus.com/bid/16975

来源: BUGTRAQ

名称: 20060306 Out of memory crash in Freeciv 2.0.7

链接:http://www.securityfocus.com/archive/1/archive/1/426866/100/0/threaded

来源: VUPEN

名称: ADV-2006-0838

链接:http://www.frsirt.com/english/advisories/2006/0838

来源: SECUNIA

名称: 19120

链接:http://secunia.com/advisories/19120

来源: MANDRIVA

名称: MDKSA-2006:053

链接:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:053

来源: XF

名称: freeciv-packets-dos(25166)

链接:http://xforce.iss.net/xforce/xfdb/25166

来源: MANDRIVA

名称: MDKSA-2006:053

链接:http://www.mandriva.com/security/advisories?name=MDKSA-2006:053

来源: GENTOO

名称: GLSA-200603-11

链接:http://www.gentoo.org/security/en/glsa/glsa-200603-11.xml

来源: DEBIAN

名称: DSA-994

链接:http://www.debian.org/security/2006/dsa-994

来源: SECUNIA

名称: 19253

链接:http://secunia.com/advisories/19253

来源: SECUNIA

名称: 19227

链接:http://secunia.com/advisories/19227

来源: bugs.debian.org

链接:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=355211

受影响实体

• Freeciv Freeciv:2.0.7a  
• Freeciv Freeciv:2.0.7  
• Freeciv Freeciv:2.0.6  
• Freeciv Freeciv:2.0.5  
• Freeciv Freeciv:2.0.4  

补丁

暂无