多个Sun数据库函数缓冲区溢出漏洞

漏洞信息详情

多个Sun数据库函数缓冲区溢出漏洞

• CNNVD编号：CNNVD-200306-111
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2003-1067
  
• 漏洞类型：
  
  
  边界条件错误
  
• 发布时间：
  
  2003-06-19
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  sun
• 漏洞来源：

Solaris是一款由Sun Microsystems公司开发和维护的商业性质UNIX操作系统。
Sun的dbm_open()、ndbm()、dbm()和dbminit()库函数缺少正确的缓冲区边界检查，攻击者可以利用这些漏洞进行缓冲区溢出攻击，可以root权限在系统上执行任意指令。
这些数据库函数在拷贝外部数据到内部内存缓冲区时存在问题，提供过多的数据可导致破坏内存敏感信息。Solaris Xsun应用程序就链接有此漏洞的库，精心利用此漏洞可能以root权限在系统上执行任意指令。
＜*链接：http：//sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert\\%2F55420
*＞

厂商补丁：
Sun
—
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

SPARC Platform

Solaris 2.6：

patche 105210-47

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105210&rev=47” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105210&rev=47

patche 105377-06

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105377&rev=06” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105377&rev=06

patche 105401-43

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105401&rev=43” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105401&rev=43

Solaris 7:

patche 106541-22

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106541&rev=22” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106541&rev=22

patche 106942-26

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106541&rev=22” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106541&rev=22

patche 106949-03

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106949&rev=03” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106949&rev=03

Solaris 8

Patch 108827-24

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108827&rev=24” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108827&rev=24

Patch 108993-16

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108993&rev=16” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108993&rev=16

Patch 109152-02

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=109152&rev=02” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=109152&rev=02

Solari 9

Patch 112874-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112874&rev=01” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112874&rev=01

Patch 112922-02

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112922&rev=02” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112922&rev=02

Patch 112922-02

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112922&rev=02” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112922&rev=02

Patch 113319-10

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=113319&rev=10” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=113319&rev=10

Patch 114569-02

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114569&rev=02” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114569&rev=02

Patch 114571-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114571&rev=01” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114571&rev=01

x86 Platform

Solaris 2.6

patche 105211-49

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105211&rev=49” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105211&rev=49

patche 105402-43

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105402&rev=43” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105402&rev=43

Solaris 7

patche 106542-22

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106542&rev=22” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106542&rev=22

patche 106943-26

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106943&rev=26” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106943&rev=26

patche 108828-25

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108828&rev=25” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108828&rev=25

patche 108994-16

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108994&rev=16” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108994&rev=16

patche 114617-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114617&rev=01” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114617&rev=01

Solaris 9

patche 113719-03

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=113719&rev=03” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=113719&rev=03

patche 114570-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114570&rev=01” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114570&rev=01

patche 114715-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114715&rev=01” target=”_blank”>
http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114715&rev=01

来源: XF
名称: sun-database-functions-bo(12379)
链接:http://xforce.iss.net/xforce/xfdb/12379

来源: BID
名称: 7991
链接:http://www.securityfocus.com/bid/7991

来源: CIAC
名称: N-108
链接:http://www.ciac.org/ciac/bulletins/n-108.shtml

来源: SUNALERT
名称: 55420
链接:http://sunsolve.sun.com/search/document.do?assetkey=1-26-55420-1

来源: SECUNIA
名称: 9088
链接:http://secunia.com/advisories/9088/