Calife Local Memory Corruption漏洞

漏洞信息详情

Calife Local Memory Corruption漏洞

• CNNVD编号：CNNVD-200403-065
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2004-0188
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2004-03-15
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-05-13
  
• 厂        商：
  
  calife
• 漏洞来源：
  Discovery of this …

Calife 2.8.5及以前的版本存在基于堆的缓冲区溢出漏洞。本地用户借助超长密码执行任意代码。

Debian has released advisory DSA 461-1 dealing with this issue. Fixes are currently available.
Calife Calife 2.8.4 c

• Debian calife_2.8.4c-1woody1_alpha.debAlpha Architecture:
  
  http://security.debian.org/pool/updates/main/c/calife/calife_2.8.4c-1w
  oody1_alpha.deb
• Debian calife_2.8.4c-1woody1_arm.debARM Architecture:
  
  http://security.debian.org/pool/updates/main/c/calife/calife_2.8.4c-1w
  oody1_arm.deb
• Debian calife_2.8.4c-1woody1_hppa.debHP Precision Architecture:
  
  http://security.debian.org/pool/updates/main/c/calife/calife_2.8.4c-1w
  oody1_hppa.deb
• Debian calife_2.8.4c-1woody1_i386.debIntel IA-32 Architecture:
  
  http://security.debian.org/pool/updates/main/c/calife/calife_2.8.4c-1w
  oody1_i386.deb
• Debian calife_2.8.4c-1woody1_ia64.debIntel IA-64 Architecture:
  
  http://security.debian.org/pool/updates/main/c/calife/calife_2.8.4c-1w
  oody1_ia64.deb
• Debian calife_2.8.4c-1woody1_m68k.debMotorola 680×0 Architecture:
  
  http://security.debian.org/pool/updates/main/c/calife/calife_2.8.4c-1w
  oody1_m68k.deb
• Debian calife_2.8.4c-1woody1_mips.debBig endian MIPS Architecture:
  
  http://security.debian.org/pool/updates/main/c/calife/calife_2.8.4c-1w
  oody1_mips.deb
• Debian calife_2.8.4c-1woody1_mipsel.debLittle endian MIPS Architecture:
  
  http://security.debian.org/pool/updates/main/c/calife/calife_2.8.4c-1w
  oody1_mipsel.deb
• Debian calife_2.8.4c-1woody1_powerpc.debPowerPC Architecture:
  
  http://security.debian.org/pool/updates/main/c/calife/calife_2.8.4c-1w
  oody1_powerpc.deb
• Debian calife_2.8.4c-1woody1_s390.debIBM S/390 Architecture:
  
  http://security.debian.org/pool/updates/main/c/calife/calife_2.8.4c-1w
  oody1_s390.deb
• Debian calife_2.8.4c-1woody1_sparc.debSun Sparc Architecture:
  
  http://security.debian.org/pool/updates/main/c/calife/calife_2.8.4c-1w
  oody1_sparc.deb

来源: BID
名称: 9756
链接:http://www.securityfocus.com/bid/9756

来源: DEBIAN
名称: DSA-461
链接:http://www.debian.org/security/2004/dsa-461

来源: XF
名称: calife-long-password-bo(15335)
链接:http://xforce.iss.net/xforce/xfdb/15335

来源: BUGTRAQ
名称: 20040227 Calife heap corrupt / potential local root exploit
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=107789737832092&w=2

来源: BID
名称: 9776
链接:http://www.securityfocus.com/bid/9776