FreeBSD Orville-write 端口漏洞

漏洞信息详情

FreeBSD Orville-write 端口漏洞

• CNNVD编号：CNNVD-200003-049
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2000-0235
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2000-03-27
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-05-02
  
• 厂        商：
  
  freebsd
• 漏洞来源：
  This vulnerability…

orville-write包中的huh程序存在缓冲区溢出漏洞，本地用户可以利用这个漏洞获得根用户权限。

Versions of orville-write in the ports hierarchy since March 9, 2000 have not been vulnerable. FreeBSD 4.0-RELEASE is not vulnerable. New versions of this port are available at
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-3-stable/misc/orville-write-2.41a.tgz
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-4-current/misc/orville-write-2.41a.tgz
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/alpha/packages-4-current/misc/orville-write-2.41a.tgz
The FreeBSD port skeleton is available at
http://www.freebsd.org/ports

来源: FREEBSD
名称: FreeBSD-SA-00:10
链接:ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:10-orville-write.asc

来源: BID
名称: 1070
链接:http://www.securityfocus.com/bid/1070

来源: OSVDB
名称: 1263
链接:http://www.osvdb.org/1263