Noffle远程内存破坏漏洞

漏洞信息详情

Noffle远程内存破坏漏洞

• CNNVD编号：CNNVD-200302-005
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2003-0037
  
• 漏洞类型：
  
  
  边界条件错误
  
• 发布时间：
  
  2003-01-27
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  noffle
• 漏洞来源：
  Debian Security Ad…

noffle是一款开放源代码离线新闻服务程序。
noffle存在不明漏洞，远程攻击者可以利用这个漏洞以服务进程权限在系统上执行任意代码或进行拒绝服务攻击。
目前没有详细漏洞细节描述。

厂商补丁：
Noffle
——
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

Noffle Noffle 1.0.1:

Debian Upgrade noffle_1.0.1-1.1_alpha.deb

http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_alpha.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_alpha.deb

Debian Upgrade noffle_1.0.1-1.1_arm.deb

http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_arm.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_arm.deb

Debian Upgrade noffle_1.0.1-1.1_i386.deb

http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_i386.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_i386.deb

Debian Upgrade noffle_1.0.1-1.1_ia64.deb

http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_ia64.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_ia64.deb

Debian Upgrade noffle_1.0.1-1.1_hppa.deb

http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_hppa.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_hppa.deb

Debian Upgrade noffle_1.0.1-1.1_m68k.deb

http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_m68k.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_m68k.deb

Debian Upgrade noffle_1.0.1-1.1_mips.deb

http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_mips.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_mips.deb

Debian Upgrade noffle_1.0.1-1.1_mipsel.deb

http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_mipsel.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_mipsel.deb

Debian Upgrade noffle_1.0.1-1.1_powerpc.deb

http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_powerpc.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_powerpc.deb

Debian Upgrade noffle_1.0.1-1.1_s390.deb

http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_s390.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_s390.deb

Debian Upgrade noffle_1.0.1-1.1_sparc.deb

http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_sparc.deb” target=”_blank”>
http://security.debian.org/pool/updates/main/n/noffle/noffle_1.0.1-1.1_sparc.deb

补丁安装方法：

1. 手工安装补丁包：

首先，使用下面的命令来下载补丁软件：

# wget url (url是补丁下载链接地址)

然后，使用下面的命令来安装补丁：

# dpkg -i file.deb (file是相应的补丁名)

2. 使用apt-get自动安装补丁包：

首先，使用下面的命令更新内部数据库：

# apt-get update

然后，使用下面的命令安装更新软件包：

# apt-get upgrade

来源: DEBIAN
名称: DSA-244
链接:http://www.debian.org/security/2003/dsa-244

来源: XF
名称: noffle-multiple-bo(11181)
链接:http://xforce.iss.net/xforce/xfdb/11181

来源: BID
名称: 6695
链接:http://www.securityfocus.com/bid/6695

来源: SECUNIA
名称: 7955
链接:http://secunia.com/advisories/7955