Gaim Manual浏览器命令任意命令执行漏洞

漏洞信息详情

Gaim Manual浏览器命令任意命令执行漏洞

• CNNVD编号：CNNVD-200209-054
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2002-0989
  
• 漏洞类型：
  
  
  输入验证
  
• 发布时间：
  
  2002-09-24
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-05-02
  
• 厂        商：
  
  rob_flynn
• 漏洞来源：
  Discovery of this …

Gaim 0.59.1版本的manual浏览器选项的URL处理器存在漏洞。远程攻击者借助连接的shell元字符执行任意脚本。

Gentoo Linux users who are using net-im/gaim-0.59 and earlier are advised to upgrade their systems using the following:
emerge rsync
emerge gaim
emerge clean
HP has released an advisory for HP Secure OS Software for Linux Release 1.0. Users are advised to apply the fixes provided in the attached Red Hat advisory (RHSA-2002:189-08) to address this problem with systems running HP Secure OS Software for Linux.
FreeBSD has released upgrades. Users are advised to upgrade their Ports
collection and reinstall the affected port.
The following fixes are available:
Rob Flynn Gaim 0.51

• Mandrake gaim-0.59.1-1.1mdk.i586.rpmLinux-Mandrake 7.1.
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake gaim-0.59.1-1.1mdk.i586.rpmLinux-Mandrake 7.2.
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake gaim-0.59.1-1.1mdk.i586.rpmMandrake Corporate Server 1.0.1.
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake gaim-0.59.1-1.1mdk.i586.rpmMandrake Linux 8.0.
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake gaim-0.59.1-1.1mdk.i586.rpmMandrake Linux 8.1.
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake gaim-0.59.1-1.1mdk.i586.rpmMandrake Linux 8.2.
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake gaim-0.59.1-1.1mdk.ia64.rpmMandrake Linux 8.1/ia64.
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake gaim-0.59.1-1.1mdk.ppc.rpmMandrake Linux 8.0/ppc.
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake gaim-0.59.1-1.1mdk.ppc.rpmMandrake Linux 8.2/ppc.
  
  http://www.mandrakesecure.net/en/ftp.php

Rob Flynn Gaim 0.56

• Rob Flynn gaim-0.59.1.tar.gz
  
  http://prdownloads.sourceforge.net/gaim/gaim-0.59.1.tar.gz

Rob Flynn Gaim 0.57

• Rob Flynn gaim-0.59.1.tar.gz
  
  http://prdownloads.sourceforge.net/gaim/gaim-0.59.1.tar.gz

Rob Flynn Gaim 0.58

• Debian gaim-common_0.58-2.2_alpha.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-common_0.58-2
  .2_alpha.deb
• Debian gaim-common_0.58-2.2_arm.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-common_0.58-2
  .2_arm.deb
• Debian gaim-common_0.58-2.2_hppa.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-common_0.58-2
  .2_hppa.deb
• Debian gaim-common_0.58-2.2_i386.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-common_0.58-2
  .2_i386.deb
• Debian gaim-common_0.58-2.2_ia64.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-common_0.58-2
  .2_ia64.deb
• Debian gaim-common_0.58-2.2_m68k.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-common_0.58-2
  .2_m68k.deb
• Debian gaim-common_0.58-2.2_mips.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-common_0.58-2
  .2_mips.deb
• Debian gaim-common_0.58-2.2_mipsel.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-common_0.58-2
  .2_mipsel.deb
• Debian gaim-common_0.58-2.2_powerpc.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-common_0.58-2
  .2_powerpc.deb
• Debian gaim-common_0.58-2.2_s390.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-common_0.58-2
  .2_s390.deb
• Debian gaim-common_0.58-2.2_sparc.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-common_0.58-2
  .2_sparc.deb
• Debian gaim-gnome_0.58-2.2_alpha.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-gnome_0.58-2.
  2_alpha.deb
• Debian gaim-gnome_0.58-2.2_arm.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-gnome_0.58-2.
  2_arm.deb
• Debian gaim-gnome_0.58-2.2_hppa.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-gnome_0.58-2.
  2_hppa.deb
• Debian gaim-gnome_0.58-2.2_i386.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-gnome_0.58-2.
  2_i386.deb
• Debian gaim-gnome_0.58-2.2_ia64.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-gnome_0.58-2.
  2_ia64.deb
• Debian gaim-gnome_0.58-2.2_m68k.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-gnome_0.58-2.
  2_m68k.deb
• Debian gaim-gnome_0.58-2.2_mips.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-gnome_0.58-2.
  2_mips.deb
• Debian gaim-gnome_0.58-2.2_mipsel.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-gnome_0.58-2.
  2_mipsel.deb
• Debian gaim-gnome_0.58-2.2_powerpc.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-gnome_0.58-2.
  2_powerpc.deb
• Debian gaim-gnome_0.58-2.2_s390.deb
  
  http://security.debian.org/pool/updates/main/g/gaim/gaim-gnome_0.58-2.
  2_s390.deb
• Debian gaim-gnome_0.58-2.2_sparc.deb
  
  http://security