Mah-Jong服务器空指针引用远程服务拒绝漏洞

漏洞信息详情

Mah-Jong服务器空指针引用远程服务拒绝漏洞

• CNNVD编号：CNNVD-200409-067
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2004-0458
  
• 漏洞类型：
  
  
  输入验证
  
• 发布时间：
  
  2004-09-28
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  nicolas_boullis
• 漏洞来源：
  This issue was dis…

mah-jong 1.6.2之前版本存在漏洞。远程攻击者可以借助丢失的参数导致服务拒绝（服务器崩溃），该漏洞引起空指针引用。

Debian have released an advisory (DSA 503-1), which contains fixes to address this issue. Affected users are advised to upgrade as soon as possible. Further details regarding applying fixes are available in the referenced advisory.
Nicolas Boullis Mah-Jong 1.4

• Debian mah-jong_1.4-3_alpha.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3
  _alpha.deb
• Debian mah-jong_1.4-3_arm.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3
  _arm.deb
• Debian mah-jong_1.4-3_hppa.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3
  _hppa.deb
• Debian mah-jong_1.4-3_i386.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3
  _i386.deb
• Debian mah-jong_1.4-3_ia64.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3
  _ia64.deb
• Debian mah-jong_1.4-3_m68k.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3
  _m68k.deb
• Debian mah-jong_1.4-3_mips.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3
  _mips.deb
• Debian mah-jong_1.4-3_mipsel.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3
  _mipsel.deb
• Debian mah-jong_1.4-3_powerpc.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3
  _powerpc.deb
• Debian mah-jong_1.4-3_s390.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3
  _s390.deb
• Debian mah-jong_1.4-3_sparc.debDebian GNU/Linux 3.0 (woody)
  
  http://security.debian.org/pool/updates/main/m/mah-jong/mah-jong_1.4-3
  _sparc.deb

来源: XF
名称: mah-jong-null-dos(16143)
链接:http://xforce.iss.net/xforce/xfdb/16143

来源: BID
名称: 10343
链接:http://www.securityfocus.com/bid/10343

来源: DEBIAN
名称: DSA-503
链接:http://www.debian.org/security/2004/dsa-503