多个Linux厂商的imwheel漏洞

漏洞信息详情

多个Linux厂商的imwheel漏洞

• CNNVD编号：CNNVD-200003-026
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2000-0230
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2000-03-13
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-05-02
  
• 厂        商：
  
  halloween
• 漏洞来源：
  This vulnerability…

imwheel中存在缓冲区溢出漏洞，本地用户可以通过imwheel-solo脚本和超长HOME环境变量获得根用户权限。

RedHat has made patches available for this problem.
Removal of the setuid wrapper script ‘imwheel-solo’ will eliminate this problem.
RedHat Linux 6.1 i386

• Red Hat Inc. 6.1 i386 imwheel-0.9.8-1.i386.rpm
  ftp://updates.redhat.com/powertools/6.1/i386/imwheel-0.9.8-1.i386.rpm

RedHat Linux 6.1 sparc

• Red Hat Inc. 6.1 sparc imwheel-0.9.8-1.sparc.rpm
  ftp://updates.redhat.com/powertools/6.1/sparc/imwheel-0.9.8-1.sparc.rp
  m

RedHat Linux 6.1 alpha

• Red Hat Inc. 6.1 alpha imwheel-0.9.8-1.alpha.rpm
  imwheel-0.9.8-1.alpha.rpm

RedHat Linux 6.2 sparc

• Red Hat Inc. 6.2 sparc imwheel-0.9.8-1.sparc.rpm
  ftp://updates.redhat.com/powertools/6.2/sparc/imwheel-0.9.8-1.sparc.rp
  m

RedHat Linux 6.2 i386

• Red Hat Inc. 6.2 i386 imwheel-0.9.8-1.i386.rpm
  ftp://updates.redhat.com/powertools/6.2/i386/imwheel-0.9.8-1.i386.rpm

RedHat Linux 6.2 alpha

• Red Hat Inc. 6.2 alpha imwheel-0.9.8-1.alpha.rpm
  ftp://updates.redhat.com/powertools/6.2/alpha/imwheel-0.9.8-1.alpha.rp
  m

来源: BID
名称: 1060
链接:http://www.securityfocus.com/bid/1060

来源: REDHAT
名称: RHSA-2000:016
链接:http://www.redhat.com/support/errata/RHSA-2000-016.html

来源: BUGTRAQ
名称: 20000316 TESO & C-Skills development advisory — imwheel
链接:http://archives.neohapsis.com/archives/bugtraq/2000-03/0168.html