漏洞信息详情
Pedestal Software Integrity Protection Driver本地服务拒绝漏洞
- CNNVD编号:CNNVD-200408-134
- 危害等级: 低危
- CVE编号:
CVE-2004-1718
- 漏洞类型:
设计错误
- 发布时间:
2004-08-17
- 威胁类型:
本地
- 更新时间:
2005-10-20
- 厂 商:
pedestal_software - 漏洞来源:
Discovery of this … -
漏洞简介
Integrity Protection Driver (IPD) 1.4 及其之前版本中的ZwOpenSection函数存在漏洞。本地用户可以通过\”oa\”参数中的无效指针导致服务拒绝(崩溃)。
漏洞公告
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com
参考网址
来源: XF
名称: ipd-oa-pointer-dos(17010)
链接:http://xforce.iss.net/xforce/xfdb/17010
来源: BID
名称: 10965
链接:http://www.securityfocus.com/bid/10965
来源: www.ngsec.com
链接:http://www.ngsec.com/docs/advisories/NGSEC-2004-6.txt
来源: SECUNIA
名称: 12169
链接:http://secunia.com/advisories/12169
来源: BUGTRAQ
名称: 20040817 [NGSEC-2004-6] IPD, local system denial of service.
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=109276749821133&w=2