Gnome Updater任意RPM安装漏洞

漏洞信息详情

Gnome Updater任意RPM安装漏洞

• CNNVD编号：CNNVD-200010-068
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2000-0722
  
• 漏洞类型：
  
  
  其他
  
• 发布时间：
  
  2000-10-20
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  helix_code
• 漏洞来源：
  First posted to Bu…

Helix GNOME Updater helix-update 0.5及其之前版本存在漏洞。本地用户可以通过在根目录开始安装包前创建/tmp/helix-install安装目录。

Helix Code GNOME Updater 0.1

• Helix Code Caldera eDesktop 2.4: helix-update-0.6-0_helix_2
  
  http://spidermonkey.helixcode.com/distributions/Caldera-2.4/helix-upda
  te-0.6-0_helix_2.i386.rpm
• Helix Code Linux PPC: helix-update-0.6.0_helix_2
  
  http://spidermonkey.helixcode.com/distributions/LinuxPPC/helix-update-
  0.6.0_helix_2.ppc.rpm
• Helix Code Mandrake: helix-update-0.6-0mdk_helix_2
  
  http://spidermonkey.helixcode.com/distributions/Mandrake/helix-update-
  0.6-0mdk_helix_2.i586.rpm
• Helix Code RedHat: helix-update-0.6-0_helix_2
  
  http://spidermonkey.helixcode.com/distributions/RedHat-6/helix-update-
  0.6-0_helix_2.i386.rpm
• Helix Code Solaris (sparc u64): helix-update-0.6-0_helix_1
  
  http://spidermonkey.helixcode.com/distributions/Solaris/helix-update-0
  .6-0_helix_1.sparc64.rpm
• Helix Code SuSE 6.3: hupdate-0.6-0_helix_2
  
  http://spidermonkey.helixcode.com/distributions/SuSE/hupdate-0.6-0_hel
  ix_2.i386.rpm
• Helix Code SuSE 6.4: hupdate-0.6-0_helix_2
  
  http://spidermonkey.helixcode.com/distributions/SuSE-6.4/hupdate-0.6-0
  _helix_2.i386.rpm
• Helix Code TurboLinux:: helix-update-0.6-0_helix_3
  
  http://spidermonkey.helixcode.com/distributions/TurboLinux-6/helix-upd
  ate-0.6-0_helix_3.i386.rpm

Helix Code GNOME Updater 0.2

• Helix Code Caldera eDesktop 2.4: helix-update-0.6-0_helix_2
  
  http://spidermonkey.helixcode.com/distributions/Caldera-2.4/helix-upda
  te-0.6-0_helix_2.i386.rpm
• Helix Code Linux PPC: helix-update-0.6.0_helix_2
  
  http://spidermonkey.helixcode.com/distributions/LinuxPPC/helix-update-
  0.6.0_helix_2.ppc.rpm
• Helix Code Mandrake: helix-update-0.6-0mdk_helix_2
  
  http://spidermonkey.helixcode.com/distributions/Mandrake/helix-update-
  0.6-0mdk_helix_2.i586.rpm
• Helix Code RedHat: helix-update-0.6-0_helix_2
  
  http://spidermonkey.helixcode.com/distributions/RedHat-6/helix-update-
  0.6-0_helix_2.i386.rpm
• Helix Code Solaris (sparc u64): helix-update-0.6-0_helix_1
  
  http://spidermonkey.helixcode.com/distributions/Solaris/helix-update-0
  .6-0_helix_1.sparc64.rpm
• Helix Code SuSE 6.3: hupdate-0.6-0_helix_2
  
  http://spidermonkey.helixcode.com/distributions/SuSE/hupdate-0.6-0_hel
  ix_2.i386.rpm
• Helix Code SuSE 6.4: hupdate-0.6-0_helix_2
  
  http://spidermonkey.helixcode.com/distributions/SuSE-6.4/hupdate-0.6-0
  _helix_2.i386.rpm
• Helix Code TurboLinux:: helix-update-0.6-0_helix_3
  
  http://spidermonkey.helixcode.com/distributions/TurboLinux-6/helix-upd
  ate-0.6-0_helix_3.i386.rpm

Helix Code GNOME Updater 0.3

• Helix Code Caldera eDesktop 2.4: helix-update-0.6-0_helix_2
  
  http://spidermonkey.helixcode.com/distributions/Caldera-2.4/helix-upda
  te-0.6-0_helix_2.i386.rpm
• Helix Code Linux PPC: helix-update-0.6.0_helix_2
  
  http://spidermonkey.helixcode.com/distributions/LinuxPPC/helix-update-
  0.6.0_helix_2.ppc.rpm
• Helix Code Mandrake: helix-update-0.6-0mdk_helix_2
  
  http://spidermonkey.helixcode.com/distributions/Mandrake/helix-update-
  0.6-0mdk_helix_2.i586.rpm
• Helix Code RedHat: helix-update-0.6-0_helix_2
  
  http://spidermonkey.helixcode.com/distributions/RedHat-6/helix-update-
  0.6-0_helix_2.i386.rpm
• Helix Code Solaris (sparc u64): helix-update-0.6-0_helix_1
  
  http://spidermonkey.helixcode.com/distributions/Solaris/helix-update-0
  .6-0_helix_1.sparc64.rpm
• Helix Code SuSE 6.3: hupdate-0.6-0_helix_2
  
  http://spidermonkey.helixcode.com/distributions/SuSE/hupdate-0.6-0_hel
  ix_2.i386.rpm
• Helix Code SuSE 6.4: hupdate-0.6-0_helix_2
  
  http://spidermonkey.helixcode.com/distributions/SuSE-6.4/hupdate-0.6-0
  _helix_2.i386.rpm
• Helix Code TurboLinux:: helix-update-0.6-0_helix_3
  
  http://spidermonkey.helixcode.com/distributions/TurboLinux-6/helix-upd
  ate-0.6-0_helix_3.i386.rpm

Helix Code GNOME Updater 0.4

• Helix Code Caldera eDesktop 2.4: helix-update-0.6-0_helix_2
  
  http://spidermonkey.helixcode.com/distributions/Caldera-2.4/helix-upda
  te-0.6-0_helix_2.i386.rpm
• Helix Code Linux PPC: helix-update-0.6.0_helix_2
  
  http://spidermonkey.helixcode.com/distributions/LinuxPPC/helix-update-
  0.6.0_helix_2.ppc.rpm
• Helix Code Mandrake: helix-update-0.6-0mdk_helix_2
  
  http://spidermonkey.helixcode.com/distributions/Mandrake/helix-update-
  0.6-0mdk_helix_2.i586.rpm
• Helix Code RedHat: helix-update-0.6-0_helix_2
  
  http://spidermonkey.helixcode.com/distributions/RedHat-6/helix-update-
  0.6-0_helix_2.i386.rpm
• Helix Code Solaris (sparc u64): helix-update-0.6-0_helix_1
  

  参考网址

  来源: BID
  名称: 1593
  链接:http://www.securityfocus.com/bid/1593

  来源: BUGTRAQ
  名称: 20000820 [Helix Beta] Helix Code Security Advisory – Helix GNOME Installer
  链接:http://archives.neohapsis.com/archives/bugtraq/2000-08/0251.html

  来源: BUGTRAQ
  名称: 20000820 Helix Code Security Advisory – Helix GNOME Update
  链接:http://archives.neohapsis.com/archives/bugtraq/2000-08/0240.html

  来源: BUGTRAQ
  名称: 20000819 Multiple Local Vulnerabilities in Helix Gnome Installer
  链接:http://www.securityfocus.com/templates/archive.pike?list=1&msg=E13QAYl-0007il-00@the-village.bc.nu