Linuxconf本地环境变量缓冲区溢出漏洞。

漏洞信息详情

Linuxconf本地环境变量缓冲区溢出漏洞。

• CNNVD编号：CNNVD-200304-014
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2002-1506
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2003-04-02
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  jacques_gelinas
• 漏洞来源：
  Discovery of this …

Linuxconf 1.28r4之前版本存在缓冲区溢出漏洞。本地用户借助超长环境变量执行任意代码。该漏洞溢出一个已产生的错误字符串。

The vendor has released a fix which addresses this issue:
Jacques Gelinas Linuxconf 1.1.6 r10

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.1.7

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.1.8

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.1.9 r2

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.1.9 r1

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2 r1

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2 r2

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2.1 r3

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2.1 r1

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2.1 r2

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2.1 r5

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2.1 r7

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2.1 r8

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2.1 r6

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2.1

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2.1 r4

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2.2

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2.3 r1

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2.3

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2.3 r2

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2.4 r2

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2.4

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2.4 r5

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.2.4 r4

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.27 r3

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.27

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.27 r5

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.27 r4

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.28 r3

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.28 r2

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.28

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

Jacques Gelinas Linuxconf 1.28 r1

• Linuxconf Linuxconf 1.28r4
  
  http://www.solucorp.qc.ca/linuxconf/

来源: BID
名称: 5585
链接:http://www.securityfocus.com/bid/5585

来源: XF
名称: linuxconf-linuxconflang-env-bo(9980)
链接:http://www.iss.net/security_center/static/9980.php

来源: BUGTRAQ
名称: 20020828 iDEFENSE Security Advisory: Linuxconf locally exploitable buffer overflow
链接:http://archives.neohapsis.com/archives/bugtraq/2002-08/0304.html

来源: VULNWATCH
名称: 20020828 iDEFENSE Security Advisory: Linuxconf locally exploitable buffer overflow
链接:http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0093.html

来源: www.solucorp.qc.ca
链接:http://www.solucorp.qc.ca/changes.hc?projet=linuxconf&version=1.28r4