GKrellM Newsticker畸形RDF服务拒绝漏洞

漏洞信息详情

GKrellM Newsticker畸形RDF服务拒绝漏洞

• CNNVD编号：CNNVD-200305-025
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2003-0206
  
• 漏洞类型：
  
  
  其他
  
• 发布时间：
  
  2003-05-12
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  gkrellm_newsticker
• 漏洞来源：
  Discovery of this …

gkrellm-newsticker gkrellm plugin 0.3-3.1之前版本存在漏洞。远程攻击者可以借助(1)链接或（2）包含多行的标题元素导致服务拒绝（崩溃）。

Debian has released an advisory (DSA 294-1) which addresses this issue. Please see the attached advisory for details on obtaining and applying fixes.
GKrellM Newsticker GKrellM Newsticker 0.3

• Debian gkrellm-newsticker_0.3-3.1_alpha.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gkrellm-newsticker/gkre
  llm-newsticker_0.3-3.1_alpha.deb
• Debian gkrellm-newsticker_0.3-3.1_arm.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gkrellm-newsticker/gkre
  llm-newsticker_0.3-3.1_arm.deb
• Debian gkrellm-newsticker_0.3-3.1_hppa.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gkrellm-newsticker/gkre
  llm-newsticker_0.3-3.1_hppa.deb
• Debian gkrellm-newsticker_0.3-3.1_i386.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gkrellm-newsticker/gkre
  llm-newsticker_0.3-3.1_i386.deb
• Debian gkrellm-newsticker_0.3-3.1_ia64.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gkrellm-newsticker/gkre
  llm-newsticker_0.3-3.1_ia64.deb
• Debian gkrellm-newsticker_0.3-3.1_m68k.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gkrellm-newsticker/gkre
  llm-newsticker_0.3-3.1_m68k.deb
• Debian gkrellm-newsticker_0.3-3.1_mips.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gkrellm-newsticker/gkre
  llm-newsticker_0.3-3.1_mips.deb
• Debian gkrellm-newsticker_0.3-3.1_mipsel.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gkrellm-newsticker/gkre
  llm-newsticker_0.3-3.1_mipsel.deb
• Debian gkrellm-newsticker_0.3-3.1_powerpc.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gkrellm-newsticker/gkre
  llm-newsticker_0.3-3.1_powerpc.deb
• Debian gkrellm-newsticker_0.3-3.1_s390.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gkrellm-newsticker/gkre
  llm-newsticker_0.3-3.1_s390.deb
• Debian gkrellm-newsticker_0.3-3.1_sparc.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/g/gkrellm-newsticker/gkre
  llm-newsticker_0.3-3.1_sparc.deb

来源: DEBIAN
名称: DSA-294
链接:http://www.debian.org/security/2003/dsa-294

来源: BUGTRAQ
名称: 20030423 Security problems in gkrellm-newsticker
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=105111327000755&w=2