Debian GNU/Linux 2.1 apcd符号链接漏洞

漏洞信息详情

Debian GNU/Linux 2.1 apcd符号链接漏洞

• CNNVD编号：CNNVD-200002-001
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2000-0107
  
• 漏洞类型：
  
  
  竞争条件
  
• 发布时间：
  
  2000-02-01
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-05-02
  
• 厂        商：
  
  debian
• 漏洞来源：
  This vulnerability…

Linux apcd程序存在漏洞。本地攻击者可以借助符号链接攻击修改任意文件。

If there is no apc attached to the machine, this daemon can safely be stopped, and removed from startup scripts.
The vendor has made patches available for this problem
Source:
http://security.debian.org/dists/stable/updates/source/apcd_0.6a.nr-4slink1.diff.gz
MD5 checksum: 418d34e54e080c2129b8a686e8423d6d
http://security.debian.org/dists/stable/updates/source/apcd_0.6a.nr-4slink1.dsc
MD5 checksum: f9be18f528e8a067696673337e1198ca
http://security.debian.org/dists/stable/updates/source/apcd_0.6a.nr.orig.tar.gz
MD5 checksum: 4a714a8de33cc482b678c0d21b26d76e
Alpha architecture:
http://security.debian.org/dists/stable/updates/binary-alpha/apcd_0.6a.nr-4slink1_alpha.deb
MD5 checksum: 00210d5c30732f2bbaf68291f2d7e8d8
Intel ia32 architecture:
http://security.debian.org/dists/stable/updates/binary-i386/apcd_0.6a.nr-4slink1_i386.deb
MD5 checksum: cff51852635922507c37f96df99d8e76
Motorola 680×0 architecture:
http://security.debian.org/dists/stable/updates/binary-m68k/apcd_0.6a.nr-4slink1_m68k.deb
MD5 checksum: 827079cf5f0819653635873ded1f4a75
Sun Sparc architecture:
http://security.debian.org/dists/stable/updates/binary-sparc/apcd_0.6a.nr-4slink1_sparc.deb
MD5 checksum: d56b7b9ea14c4af81856dd3e1b480e92
These files will be moved into
ftp://ftp.debian.org/debian/dists/stable/*/binary-$arch/ soon.

来源: BID
名称: 958
链接:http://www.securityfocus.com/bid/958

来源: DEBIAN
名称: 20000201
链接:http://www.debian.org/security/2000/20000201