IMP/MSWordView /tmp文件删除拒绝服务漏洞

漏洞信息详情

IMP/MSWordView /tmp文件删除拒绝服务漏洞

漏洞简介

IMP和MSWordView应用软件没有正确删除文件存在漏洞,本地用户可以通过超大数量的文档用完所以磁盘空间并提前停止请求触发拒绝服务。

漏洞公告

Currently the SecurityFocus staff are not ware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com.
A suitable solution may be to set up a cron job which will remove any file present in /tmp that is over some period of time long. This time will depend on the system.

参考网址

来源: BID
名称: 1361
链接:http://www.securityfocus.com/bid/1361

来源: BUGTRAQ
名称: 20000424 Two Problems in IMP 2
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=95672120116627&w=2

© 版权声明
THE END
喜欢就支持一下吧
点赞0 分享