FreeBSD端口brouted安装许可漏洞

漏洞信息详情

FreeBSD端口brouted安装许可漏洞

• CNNVD编号：CNNVD-200010-065
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2000-0752
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2000-10-20
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  freebsd
• 漏洞来源：
  This vulnerability…

FreeBSD和可能其他OSes的brouted存在缓冲区溢出漏洞。本地用户可以借助超长命令行参数提升根目录特权。

Versions of the port obtained after August 22, 2000 are not vulnerable. Newer versions of the packages are available for users who have older versions of the ports heirarchy.
FreeBSD FreeBSD 3.5

• FreeBSD 3.x i386 brouted-1.2b.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-3-stable/net/bro
  uted-1.2b.tgz

FreeBSD FreeBSD 4.0 alpha

• FreeBSD 4.x alpha brouted-1.2b.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/alpha/packages-3-stable/net/br
  outed-1.2b.tgz

FreeBSD FreeBSD 4.0

• FreeBSD 4.x i386 brouted-1.2b.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-4-stable/net/bro
  uted-1.2b.tgz

FreeBSD FreeBSD 4.1

• FreeBSD 4.x i386 brouted-1.2b.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-4-stable/net/bro
  uted-1.2b.tgz

FreeBSD FreeBSD 5.0

• FreeBSD 5.x i386 brouted-1.2b.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-5-current/net/br
  outed-1.2b.tgz

FreeBSD FreeBSD 5.0 alpha

• FreeBSD 5.x alpha brouted-1.2b.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/alpha/packages-5-current/net/b
  routed-1.2b.tgz

来源: BID
名称: 1629
链接:http://www.securityfocus.com/bid/1629

来源: FREEBSD
名称: FreeBSD-SA-00:43
链接:http://archives.neohapsis.com/archives/freebsd/2000-08/0339.html