Epic CTCP Nickname Server Message缓冲区溢出漏洞

漏洞信息详情

Epic CTCP Nickname Server Message缓冲区溢出漏洞

• CNNVD编号：CNNVD-200306-050
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2003-0328
  
• 漏洞类型：
  
  
  边界条件错误
  
• 发布时间：
  
  2003-06-09
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  epic
• 漏洞来源：
  Discovery is credi…

EPIC IRC Client (EPIC4) pre2.002， pre2.003，和可能的更新版本存在漏洞。远程恶意IRC服务器借助超大昵称的CTCP请求导致服务拒绝（崩溃）并可能执行任意代码，该漏洞可以导致不正确长度计算。

Debian has released an advisory (DSA 399-1) to address this issue. Please see the attached advisory for details on obtaining and applying fixes.
Red Hat has released a security advisory (RHSA-2003-342) that includes fixes to address this issue. Users are advised to upgrade as soon as possible.
The vendor has released a patch.
Fixes:
Epic Epic4 pre2.002

• Epic alloca_underrun-patch-1
  ftp://ftp.prbh.org/pub/epic/patches/alloca_underrun-patch-1

Epic Epic4 pre2.003

• Epic alloca_underrun-patch-1
  ftp://ftp.prbh.org/pub/epic/patches/alloca_underrun-patch-1

Epic Epic4 1.0.1

• Epic alloca_underrun-patch-1
  ftp://ftp.prbh.org/pub/epic/patches/alloca_underrun-patch-1
• Red Hat epic-1.0.1-15.7.x.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/epic-1.0.1-15.7.x.i386.rpm
• Red Hat epic-1.0.1-15.8.0.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/epic-1.0.1-15.8.0.i386.rpm
• Red Hat epic-1.0.1-15.9.i386.rpm
  ftp://updates.redhat.com/9/en/os/i386/epic-1.0.1-15.9.i386.rpm

Epic Epic4 1.1.10

• Epic alloca_underrun-patch-1
  ftp://ftp.prbh.org/pub/epic/patches/alloca_underrun-patch-1

Epic Epic4 1.1.11

• Epic alloca_underrun-patch-1
  ftp://ftp.prbh.org/pub/epic/patches/alloca_underrun-patch-1

Epic Epic4 1.1.2 .20020219

• Debian epic4_1.1.2.20020219-2.2_alpha.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/e/epic4/epic4_1.1.2.20020
  219-2.2_alpha.deb
• Debian epic4_1.1.2.20020219-2.2_arm.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/e/epic4/epic4_1.1.2.20020
  219-2.2_arm.deb
• Debian epic4_1.1.2.20020219-2.2_hppa.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/e/epic4/epic4_1.1.2.20020
  219-2.2_hppa.deb
• Debian epic4_1.1.2.20020219-2.2_i386.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/e/epic4/epic4_1.1.2.20020
  219-2.2_i386.deb
• Debian epic4_1.1.2.20020219-2.2_ia64.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/e/epic4/epic4_1.1.2.20020
  219-2.2_ia64.deb
• Debian epic4_1.1.2.20020219-2.2_m68k.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/e/epic4/epic4_1.1.2.20020
  219-2.2_m68k.deb
• Debian epic4_1.1.2.20020219-2.2_mips.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/e/epic4/epic4_1.1.2.20020
  219-2.2_mips.deb
• Debian epic4_1.1.2.20020219-2.2_mipsel.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/e/epic4/epic4_1.1.2.20020
  219-2.2_mipsel.deb
• Debian epic4_1.1.2.20020219-2.2_powerpc.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/e/epic4/epic4_1.1.2.20020
  219-2.2_powerpc.deb
• Debian epic4_1.1.2.20020219-2.2_s390.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/e/epic4/epic4_1.1.2.20020
  219-2.2_s390.deb
• Debian epic4_1.1.2.20020219-2.2_sparc.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/e/epic4/epic4_1.1.2.20020
  219-2.2_sparc.deb

Epic Epic4 1.1.3

• Epic alloca_underrun-patch-1
  ftp://ftp.prbh.org/pub/epic/patches/alloca_underrun-patch-1

Epic Epic4 1.1.4

• Epic alloca_underrun-patch-1
  ftp://ftp.prbh.org/pub/epic/patches/alloca_underrun-patch-1

Epic Epic4 1.1.5

• Epic alloca_underrun-patch-1
  ftp://ftp.prbh.org/pub/epic/patches/alloca_underrun-patch-1

Epic Epic4 1.1.6

• Epic alloca_underrun-patch-1
  ftp://ftp.prbh.org/pub/epic/patches/alloca_underrun-patch-1

Epic Epic4 1.1.7 .20020907

• Epic alloca_underrun-patch-1
  ftp://ftp.prbh.org/pub/epic/patches/alloca_underrun-patch-1

Epic Epic4 1.1.7

• Epic alloca_underrun-patch-1
  ftp://ftp.prbh.org/pub/epic/patches/alloca_underrun-patch-1

来源: ftp.prbh.org
链接:ftp://ftp.prbh.org/pub/epic/patches/alloca_underrun-patch-1

来源: REDHAT
名称: RHSA-2003:342
链接:http://www.redhat.com/support/errata/RHSA-2003-342.html

来源: DEBIAN
名称: DSA-399
链接:http://www.debian.org/security/2003/dsa-399

来源: DEBIAN
名称: DSA-306
链接:http://www.debian.org/security/2003/dsa-306