splitvt格式字符串漏洞

漏洞信息详情

splitvt格式字符串漏洞

• CNNVD编号：CNNVD-200103-033
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2001-0112
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2001-03-12
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  sam_lantinga
• 漏洞来源：
  , and was announced by Michel “MaXX” Kaempf on January 14, 2001 via Bugtraq.’);”>This vulnerability…@mastersecurity.fr>

splitvt 1.6.5之前版本存在多个缓冲区溢出漏洞。本地用户执行任意命令。

Upgrades available:
Sam Lantinga splitvt 1.6.4

• Sam Lantinga splitvt source splitvt-1.6.5.tar.gz
  
  http://www.devolution.com/~slouken/projects/splitvt/splitvt-1.6.5.tar.
  gz

Debian Linux 2.2

• Debian 2.2 i386 splitvt_1.6.5-0potato1_i386.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-i386/split
  vt_1.6.5-0potato1_i386.deb

Debian Linux 2.2 alpha

• Debian 2.2 alpha splitvt_1.6.5-0potato1_alpha.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-alpha/spli
  tvt_1.6.5-0potato1_alpha.deb

Debian Linux 2.2 sparc

• Debian 2.2 sparc splitvt_1.6.5-0potato1_sparc.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-sparc/spli
  tvt_1.6.5-0potato1_sparc.deb

Debian Linux 2.2 arm

• Debian 2.2 arm splitvt_1.6.5-0potato1_arm.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-arm/splitv
  t_1.6.5-0potato1_arm.deb

Debian Linux 2.2 68k

• Debian 2.2 m68k splitvt_1.6.5-0potato1_m68k.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-m68k/split
  vt_1.6.5-0potato1_m68k.deb

Debian Linux 2.2 powerpc

• Debian 2.2 ppc splitvt_1.6.5-0potato1_powerpc.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/sp
  litvt_1.6.5-0potato1_powerpc.deb

来源: BID
名称: 2210
链接:http://www.securityfocus.com/bid/2210

来源: DEBIAN
名称: DSA-014
链接:http://www.debian.org/security/2001/dsa-014

来源: BUGTRAQ
名称: 20010114 [MSY] Multiple vulnerabilities in splitvt
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=97958269320974&w=2