Multiple Vendor kon2 Local缓冲区溢出漏洞

漏洞信息详情

Multiple Vendor kon2 Local缓冲区溢出漏洞

• CNNVD编号：CNNVD-200306-067
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2002-1155
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2003-06-16
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  redhat
• 漏洞来源：
  Discovery of this …

KON kon2 0.3.9b以及之前版本存在缓冲区溢出漏洞。本地用户借助长编码命令行参数执行任意代码。

Gentoo Linux has released an advisory. Users who have installed app-i18n/kon2 are advised to upgrade to kon2-0.3.9b-r1 by issuing the following commands:
emerge sync
emerge kon2
emerge clean
Fixes available:
RedHat kon2-0.3.9b-16.i386.rpm

• Red Hat kon2-0.3.9b-16.9.i386.rpm
  ftp://updates.redhat.com/9/en/os/i386/kon2-0.3.9b-16.9.i386.rpm
• Red Hat kon2-fonts-0.3.9b-16.9.i386.rpm
  ftp://updates.redhat.com/9/en/os/i386/kon2-fonts-0.3.9b-16.9.i386.rpm

RedHat kon2-0.3.9b-7.i386.rpm

• Red Hat kon2-0.3.9b-14.7.2.1.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/kon2-0.3.9b-14.7.2.1.i386.rpm
• Red Hat kon2-0.3.9b-14.7.3.1.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/kon2-0.3.9b-14.7.3.1.i386.rpm
• Red Hat kon2-fonts-0.3.9b-14.7.2.1.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/kon2-fonts-0.3.9b-14.7.2.1.i38
  6.rpm
• Red Hat kon2-fonts-0.3.9b-14.7.3.1.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/kon2-fonts-0.3.9b-14.7.3.1.i38
  6.rpm

RedHat kon2-0.3.9b-6.i386.rpm

• Red Hat kon2-0.3.9b-14.7.1.1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/kon2-0.3.9b-14.7.1.1.i386.rpm
• Red Hat kon2-fonts-0.3.9b-14.7.1.1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/kon2-fonts-0.3.9b-14.7.1.1.i38
  6.rpm

RedHat kon2-0.3.9b-13.i386.rpm

• Red Hat kon2-0.3.9b-14.8.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/kon2-0.3.9b-14.8.i386.rpm
• Red Hat kon2-fonts-0.3.9b-14.8.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/kon2-fonts-0.3.9b-14.8.i386.rp
  m

kon2 kon2 0.3.9 b

• Mandrake kon2-0.3.9b-1.1mdk.i586.rpmCorporate Server 2.1
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake kon2-0.3.9b-1.1mdk.i586.rpmMandrake Linux 8.2
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake kon2-0.3.9b-1.1mdk.i586.rpmMandrake Linux 9.0
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake kon2-0.3.9b-1.1mdk.i586.rpmMandrake Linux 9.1
  
  http://www.mandrakesecure.net/en/ftp.php

来源: REDHAT
名称: RHSA-2003:047
链接:http://www.redhat.com/support/errata/RHSA-2003-047.html

来源: REDHAT
名称: RHSA-2003:050
链接:http://www.redhat.com/support/errata/RHSA-2003-050.html

来源: BUGTRAQ
名称: 20030616 Next kon2root – Redhat 9
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=105577912106710&w=2

来源: MANDRAKE
名称: MDKSA-2003:064
链接:http://www.mandriva.com/security/advisories?name=MDKSA-2003:064

来源: BUGTRAQ
名称: 20030603 kon2_exploit!!
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=105474080512376&w=2