Eric S. Raymond Fetchmail恶意邮件头造成堆破坏漏洞

漏洞信息详情

Eric S. Raymond Fetchmail恶意邮件头造成堆破坏漏洞

• CNNVD编号：CNNVD-200212-039
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2002-1365
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2002-12-23
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-12
  
• 厂        商：
  
  fetchmail
• 漏洞来源：
  Stefan Esser※ s.es…

Fetchmail是一款由Eric S. Raymond维护的免费开放源代码邮件过滤系统。
Fetchmail在执行reply-hack操作时没有为搜索到的地址分配足够的空间，远程攻击者可以利用这个漏洞提交包含恶意头信息的邮件给目标用户，造成基于堆的破坏。
当Fetchmail接收到EMAIL时会执行reply-hack操作，这个操作将对邮件头中包含的地址进行搜索，搜索是否有本地地址(不包含@domain)。当此地址找到时，Fetchmail会追加@和邮件服务器主机名。在分配这些地址的空间时，只对主机名数值进行了计算，而没有处理@符号，因此邮件头中包含超长本地地址可能导致发生基于单字节的溢出，精心构建提交数据可能以本地进程权限在系统上执行任意指令。

厂商补丁：
Conectiva
———
Conectiva已经为此发布了一个安全公告(CLA-2002:554)以及相应补丁:

CLA-2002:554：fetchmail

链接：http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000554” target=”_blank”>
http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000554

补丁下载：

Conectiva Upgrade fetchmail-5.9.12-1U60_4cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/6.0/RPMS/fetchmail-5.9.12-1U60_4cl.i386.rpm

Conectiva Upgrade fetchmailconf-5.9.12-1U60_4cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/6.0/RPMS/fetchmailconf-5.9.12-1U60_4cl.i386.rpm

Conectiva Upgrade fetchmail-doc-5.9.12-1U60_4cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/6.0/RPMS/fetchmail-doc-5.9.12-1U60_4cl.i386.rpm

Conectiva Upgrade fetchmail-5.9.12-1U70_4cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/7.0/RPMS/fetchmail-5.9.12-1U70_4cl.i386.rpm

Conectiva Upgrade fetchmailconf-5.9.12-1U70_4cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/7.0/RPMS/fetchmailconf-5.9.12-1U70_4cl.i386.rpm

Conectiva Upgrade fetchmail-doc-5.9.12-1U70_4cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/7.0/RPMS/fetchmail-doc-5.9.12-1U70_4cl.i386.rpm

Conectiva Upgrade fetchmail-5.9.12-1U80_3cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/8/RPMS/fetchmail-5.9.12-1U80_3cl.i386.rpm

Conectiva Upgrade fetchmailconf-5.9.12-1U80_3cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/8/RPMS/fetchmailconf-5.9.12-1U80_3cl.i386.rpm

Conectiva Upgrade fetchmail-doc-5.9.12-1U80_3cl.i386.rpm

ftp://atualizacoes.conectiva.com.br/8/RPMS/fetchmail-doc-5.9.12-1U80_3cl.i386.rpm
Eric Raymond
————
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

Eric Raymond Upgrade fetchmail-6.2.0.tar.gz

http://www.tuxedo.org/~esr/fetchmail/fetchmail-6.2.0.tar.gz” target=”_blank”>
http://www.tuxedo.org/~esr/fetchmail/fetchmail-6.2.0.tar.gz
RedHat
——
RedHat已经为此发布了一个安全公告(RHSA-2002:293-09)以及相应补丁:

RHSA-2002:293-09：Updated Fetchmail packages fix security vulnerability

链接：https://www.redhat.com/support/errata/RHSA-2002-293.html” target=”_blank”>https://www.redhat.com/support/errata/RHSA-2002-293.html

补丁下载：

RedHat RPM fetchmail-5.9.0-21.8.0.i386.rpm

ftp://updates.redhat.com/8.0/en/os/i386/fetchmail-5.9.0-21.8.0.i386.rpm

RedHat RPM fetchmailconf-5.9.0-21.7.3.i386.rpm

ftp://updates.redhat.com/7.3/en/os/i386/fetchmailconf-5.9.0-21.7.3.i386.rpm

RedHat RPM fetchmail-5.9.0-21.7.3.i386.rpm

ftp://updates.redhat.com/7.3/en/os/i386/fetchmail-5.9.0-21.7.3.i386.rpm

RedHat RPM fetchmailconf-5.9.0-21.7.3.ia64.rpm

ftp://updates.redhat.com/7.2/en/os/ia64/fetchmailconf-5.9.0-21.7.3.ia64.rpm

RedHat RPM fetchmail-5.9.0-21.7.3.ia64.rpm

ftp://updates.redhat.com/7.2/en/os/ia64/fetchmail-5.9.0-21.7.3.ia64.rpm

RedHat RPM fetchmailconf-5.9.0-21.7.3.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/fetchmailconf-5.9.0-21.7.3.i386.rpm

RedHat RPM fetchmail-5.9.0-21.7.3.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/fetchmail-5.9.0-21.7.3.i386.rpm

RedHat RPM fetchmailconf-5.9.0-21.7.1.i386.rpm

ftp://updates.redhat.com/7.1/en/os/i386/fetchmailconf-5.9.0-21.7.1.i386.rpm

RedHat RPM fetchmail-5.9.0-21.7.1.i386.rpm

ftp://updates.redhat.com/7.1/en/os/i386/fetchmail-5.9.0-21.7.1.i386.rpm

RedHat RPM fetchmailconf-5.9.0-21.7.1.i386.rpm

ftp://updates.redhat.com/7.0/en/os/i386/fetchmailconf-5.9.0-21.7.1.i386.rpm

RedHat RPM fetchmail-5.9.0-21.7.1.i386.rpm

ftp://updates.redhat.com/7.0/en/os/i386/fetchmail-5.9.0-21.7.1.i386.rpm

RedHat RPM fetchmailconf-5.9.0-21.6.2.i386.rpm

ftp://updates.redhat.com/6.2/en/os/i386/fetchmailconf-5.9.0-21.6.2.i386.rpm

RedHat RPM fetchmail-5.9.0-21.6.2.i386.rpm

ftp://updates.redhat.com/6.2/en/os/i386/fetchmail-5.9.0-21.6.2.i386.rpm

来源: REDHAT
名称: RHSA-2002:293
链接:http://www.redhat.com/support/errata/RHSA-2002-293.html

来源: BUGTRAQ
名称: 20021213 Advisory 05/2002: Another Fetchmail Remote Vulnerability
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=103979751818638&w=2

来源: security.e-matters.de
链接:http://security.e-matters.de/advisories/052002.html

来源: XF
名称: fetchmail-address-header-bo(10839)
链接:http://xforce.iss.net/xforce/xfdb/10839

来源: BID
名称: 6390
链接:http://www.securityfocus.com/bid/6390

来源: REDHAT
名称: RHSA-2003:155
链接:http://www.redhat.com/support/errata/RHSA-2003-155.html

来源: REDHAT
名称: RHSA-2002:294
链接:http://www.redhat.com/support/errata/RHSA-2002-294.html

来源: MANDRAKE
名称: MDKSA-2003:011
链接:http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:011

来源: DEBIAN
名称: DSA-216
链接:http://www.debian.org/security/2002/dsa-216

来源: BUGTRAQ
名称: 20021215 GLSA: fetchmail
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=104004858802000&w=2

来源: CONECTIVA
名称: CLA-2002:554
链接:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000554

来源: CALDERA
名称: CSSA-2003-001.0
链接:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-001.0.txt