Linux深符号连接服务拒绝漏洞

漏洞信息详情

Linux深符号连接服务拒绝漏洞

• CNNVD编号：CNNVD-200110-116
• 危害等级： 低危
  
  
• CVE编号：
  CVE-2001-0907
  
• 漏洞类型：
  
  
  环境条件错误
  
• 发布时间：
  
  2001-10-18
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-05-13
  
• 厂        商：
  
  linux
• 漏洞来源：
  Reported to Bugtra…

Linux kernel 2.2.1版本到2.2.19版本，以及2.4.1版本到2.4.10版本存在漏洞。本地用户可以借助一系列深嵌套的符号连接导致服务拒绝，该漏洞导致内核在试图访问连接时花费额外时间。

This issue has reportedly been fully fixed in version 2.4.12 of the Linux kernel. A patch that rectifies this issue in version 2.2.19 is also available.
Vendor specific upgrades are also available.
Linux kernel 2.2.15

• MandrakeSoft 1.0.1 i586 alsa-2.2.19_0.5.10b-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 1.0.1 i586 kernel-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 1.0.1 i586 kernel-doc-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 1.0.1 i586 kernel-headers-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 1.0.1 i586 kernel-pcmcia-cs-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 1.0.1 i586 kernel-secure-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 1.0.1 i586 kernel-smp-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 1.0.1 i586 kernel-source-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 1.0.1 i586 kernel-utils-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 1.0.1 i586 reiserfs-utils-2.2.19_3.5.29-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.1 i586 alsa-2.2.19_0.5.10b-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.1 i586 alsa-source-2.2.19_0.5.10b-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.1 i586 kernel-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.1 i586 kernel-doc-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.1 i586 kernel-headers-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.1 i586 kernel-linus-2.2.20-1.1mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.1 i586 kernel-pcmcia-cs-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.1 i586 kernel-secure-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.1 i586 kernel-smp-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.1 i586 kernel-source-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.1 i586 kernel-utils-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.1 i586 reiserfs-utils-2.2.19_3.5.29-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3

Linux kernel 2.2.17

• MandrakeSoft 7.2 i586 alsa-2.2.19_0.5.10b-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.2 i586 alsa-source-2.2.19_0.5.10b-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.2 i586 kernel-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.2 i586 kernel-doc-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.2 i586 kernel-headers-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.2 i586 kernel-linus-2.2.20-1.1mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.2 i586 kernel-pcmcia-cs-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.2 i586 kernel-secure-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.2 i586 kernel-smp-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.2 i586 kernel-source-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.2 i586 kernel-utils-2.2.19-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 7.2 i586 reiserfs-utils-2.2.19_3.5.29-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3

Linux kernel 2.2.19

• MandrakeSoft 1.0.1 i586 alsa-2.2.19_0.5.10b-6.3mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 8.0 i586 kernel-linus2.2-2.2.20-1.1mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 8.0 i586 kernel22-2.2.19-20.1mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 8.0 i586 kernel22-secure-2.2.19-20.1mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 8.0 i586 kernel22-smp-2.2.19-20.1mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 8.0 i586 kernel22-source-2.2.19-20.1mdk.i586.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 8.0 ppc kernel22-2.2.19-20.1mdk.ppc.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 8.0 ppc kernel22-secure-2.2.19-20.1mdk.ppc.rpm
  
  http://www.linux-mandrake.com/en/ftp.php3
• MandrakeSoft 8.0 ppc kernel

来源: BID
名称: 3444
链接:http://www.securityfocus.com/bid/3444

来源: SUSE
名称: SuSE-SA:2001:036
链接:http://www.novell.com/linux/security/advisories/2001_036_kernel_txt.html

来源: ENGARDE
名称: ESA-20011019-02
链接:http://www.linuxsecurity.com/advisories/other_advisory-1650.html

来源: MANDRAKE
名称: MDKSA-2001:082
链接:http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3

来源: XF
名称: linux-multiple-symlink-dos(7312)
链接:http://www.iss.net/security_center/static/7312.php

来源: BUGTRAQ
名称: 20011019 TSLSA-2001-0028
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=100350685431610&w=2

来源: BUGTRAQ
名称: 20011018 Flaws in recent Linux kernels
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=100343090106914&w=2

来源: MANDRAKE
名称: MDKSA-2001:079
链接:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:079

来源: IMMUNIX
名称: IMNX-2001-70-035-01
链接:http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01

来源: CALDERA
名称: CSSA-2001-036.0
链接:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-036.0.txt