多个厂商Linux LCDProc的缓冲区溢出漏洞

漏洞信息详情

多个厂商Linux LCDProc的缓冲区溢出漏洞

• CNNVD编号：CNNVD-200004-059
• 危害等级： 超危
  
  
• CVE编号：
  CVE-2000-0295
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2000-04-21
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  lcdproc
• 漏洞来源：
  This vulnerability…

LCDproc中存在缓冲区溢出漏洞，远程攻击者可以通过screen_add命令获取根用户权限。

It is recommended that all Gentoo Linux users who are running
app-misc/lcdproc-0.4.1-r1 or earlier update their systems as
follows:
emerge rsync
emerge lcdproc
emerge clean
A patch was supplied with the post to the Bugtraq mailing list. In addition, downgrading to a previous version of LCDProc, which does not utilize a client/server model, will eliminate this problem. Those versions of LCDProc are available at lcdproc.omnipotent.net.
LCDProc LCDProc 0.4

• Andrew Hobgood lcdproc.20April2000.patch
  
  http://web.strange.net/patches/lcdproc.20April2000.patch

来源: BUGTRAQ
名称: 20000420 Remote vulnerability in LCDproc 0.4
链接:http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000421010946.15318I-200000@schizo.strange.net

来源: BID
名称: 1131
链接:http://www.securityfocus.com/bid/1131

来源: XF
名称: lcdproc-remote-overflow(4315)
链接:http://xforce.iss.net/xforce/xfdb/4315

来源: GENTOO
名称: GLSA-200301-07
链接:http://www.securityfocus.com/archive/1/archive/1/305589/30/26390/threaded

来源: SECUNIA
名称: 7829
链接:http://secunia.com/advisories/7829