Real Server管理员端口缓冲区溢出漏洞

漏洞信息详情

Real Server管理员端口缓冲区溢出漏洞

• CNNVD编号：CNNVD-199911-020
• 危害等级： 超危
  
  
• CVE编号：
  CVE-1999-0896
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  1999-11-04
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2006-01-05
  
• 厂        商：
  
  realnetworks
• 漏洞来源：
  Discovered by dark…

RealNetworks RealServer管理员实用工具中存在缓冲区溢出漏洞。远程攻击者通过一条长的用户名和密码执行任意命令。

Real Networks has released patches to adress this issue.
Windows NT:
http://docs.real.com/docs/g260authpatch/ppvb3260.dll
FreeBSD2:
http://docs.real.com/docs/g260authpatch/freebsd2/ppvbasic.so.6.0
FreeBSD3:
http://docs.real.com/docs/g260authpatch/freebsd3/ppvbasic.so.6.0
Irix 6.2:
http://docs.real.com/docs/g260authpatch/irix62/ppvbasic.so.6.0
Linux libc5:
http://docs.real.com/docs/g260authpatch/linux2/ppvbasic.so.6.0
Linux libc6:
http://docs.real.com/docs/g260authpatch/linuxc6/ppvbasic.so.6.0
Digital UNIX:
http://docs.real.com/docs/g260authpatch/osf4/ppvbasic.so.6.0
Solaris 2.51:
http://docs.real.com/docs/g260authpatch/solaris551/ppvbasic.so.6.0
Solaris 2.6:
http://docs.real.com/docs/g260authpatch/solaris56/ppvbasic.so.6.0
Solaris 2.7:
http://docs.real.com/docs/g260authpatch/solaris57/ppvbasic.so.6.0

来源: service.real.com
链接:http://service.real.com/help/faq/servg260.html

来源: BID
名称: 767
链接:http://www.securityfocus.com/bid/767