HTGET URI缓冲区溢出漏洞

漏洞信息详情

HTGET URI缓冲区溢出漏洞

• CNNVD编号：CNNVD-200412-078
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2004-0852
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2004-12-20
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  htget
• 漏洞来源：
  Discovery is credi…

htget 0.93版本存在缓冲区溢出漏洞。远程攻击者借助创建的URL执行任意代码。

Debian has released advisory DSA 611-1 to address this issue. Please see the attached advisory for information on obtaining and applying fixes.
HTGET HTGET 0.93

• Debian htget_0.93-1.1woody1_alpha.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/h/htget/htget_0.93-1.1woo
  dy1_alpha.deb
• Debian htget_0.93-1.1woody1_arm.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/h/htget/htget_0.93-1.1woo
  dy1_arm.deb
• Debian htget_0.93-1.1woody1_hppa.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/h/htget/htget_0.93-1.1woo
  dy1_hppa.deb
• Debian htget_0.93-1.1woody1_i386.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/h/htget/htget_0.93-1.1woo
  dy1_i386.deb
• Debian htget_0.93-1.1woody1_ia64.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/h/htget/htget_0.93-1.1woo
  dy1_ia64.deb
• Debian htget_0.93-1.1woody1_m68k.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/h/htget/htget_0.93-1.1woo
  dy1_m68k.deb
• Debian htget_0.93-1.1woody1_mips.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/h/htget/htget_0.93-1.1woo
  dy1_mips.deb
• Debian htget_0.93-1.1woody1_mipsel.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/h/htget/htget_0.93-1.1woo
  dy1_mipsel.deb
• Debian htget_0.93-1.1woody1_powerpc.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/h/htget/htget_0.93-1.1woo
  dy1_powerpc.deb
• Debian htget_0.93-1.1woody1_s390.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/h/htget/htget_0.93-1.1woo
  dy1_s390.deb
• Debian htget_0.93-1.1woody1_sparc.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/h/htget/htget_0.93-1.1woo
  dy1_sparc.deb

来源: XF
名称: htget-bo(18603)
链接:http://xforce.iss.net/xforce/xfdb/18603

来源: DEBIAN
名称: DSA-611
链接:http://www.debian.org/security/2004/dsa-611

来源: SECUNIA
名称: 13579
链接:http://secunia.com/advisories/13579