Speedtouch USB驱动程序本地格式串漏洞

漏洞信息详情

Speedtouch USB驱动程序本地格式串漏洞

• CNNVD编号：CNNVD-200412-088
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2004-0834
  
• 漏洞类型：
  
  
  格式化字符串
  
• 发布时间：
  
  2004-12-23
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  mandrakesoft
• 漏洞来源：
  Discovery is credi…

Speedtouch USB驱动程序1.3.1以前的版本存在格式串漏洞。本地用户借助(1)modem_run， (2)pppoa2，或者(3)pppoa3执行任意代码。

Gentoo Linux has released advisory GLSA 200411-04 along with fixes dealing with this issue. Gentoo has advised that all Speedtouch USB driver users should upgrade to the latest version:
# emerge –sync
# emerge –ask –oneshot –verbose “>=net-dialup/speedtouch-1.3.1”
For more information please see the referenced advisory.
MandrakeSoft has issued fixes for Mandrake Linux. See advisory MDKSA-2004:130 in the reference section.
Speedtouch USB Driver 1.3.1 is available to address this issue:
Speedtouch USB Driver Speedtouch USB Driver 1.0

• Mandrake speedtouch-1.0-3.1.C21mdk.i586.rpmMandrake Corporate Server 2.1
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake speedtouch-1.0-3.1.C21mdk.x86_64.rpmMandrake Corporate Server 2.1/x86_64
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake speedtouch-1.0-3.1.M82mdk.i586.rpmMandrake Multi Network Firewall 8.2
  
  http://www.mandrakesecure.net/en/ftp.php
• Speedtouch USB Driver Release 1.3.1
  
  http://sourceforge.net/project/showfiles.php?group_id=32758&package_id
  =28264&release_id=271734

Speedtouch USB Driver Speedtouch USB Driver 1.1

• Speedtouch USB Driver Release 1.3.1
  
  http://sourceforge.net/project/showfiles.php?group_id=32758&package_id
  =28264&release_id=271734

Speedtouch USB Driver Speedtouch USB Driver 1.2

• Mandrake speedtouch-1.2-1.1.92mdk.amd64.rpmMandrake Linux 9.2/AMD64
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake speedtouch-1.2-1.1.92mdk.i586.rpmMandrake Linux 9.2
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake speedtouch-1.2-2.beta3.2.1.100mdk.amd64.rpmMandrake Linux 10.0/AMD64
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake speedtouch-1.2-2.beta3.2.1.100mdk.i586.rpmMandrake Linux 10.0
  
  http://www.mandrakesecure.net/en/ftp.php
• Speedtouch USB Driver Release 1.3.1
  
  http://sourceforge.net/project/showfiles.php?group_id=32758&package_id
  =28264&release_id=271734

Speedtouch USB Driver Speedtouch USB Driver 1.2 beta2

• Speedtouch USB Driver Release 1.3.1
  
  http://sourceforge.net/project/showfiles.php?group_id=32758&package_id
  =28264&release_id=271734

Speedtouch USB Driver Speedtouch USB Driver 1.2 beta1

• Speedtouch USB Driver Release 1.3.1
  
  http://sourceforge.net/project/showfiles.php?group_id=32758&package_id
  =28264&release_id=271734

Speedtouch USB Driver Speedtouch USB Driver 1.2 beta3

• Speedtouch USB Driver Release 1.3.1
  
  http://sourceforge.net/project/showfiles.php?group_id=32758&package_id
  =28264&release_id=271734

Speedtouch USB Driver Speedtouch USB Driver 1.3

• Mandrake speedtouch-1.3-8.1.101mdk.i586.rpmMandrake Linux 10.1
  
  http://www.mandrakesecure.net/en/ftp.php
• Mandrake speedtouch-1.3-8.1.101mdk.x86_64.rpmMandrake Linux 10.1/x86_64
  
  http://www.mandrakesecure.net/en/ftp.php
• Speedtouch USB Driver Release 1.3.1
  
  http://sourceforge.net/project/showfiles.php?group_id=32758&package_id
  =28264&release_id=271734

来源: XF
名称: speedtouch-format-string(17792)
链接:http://xforce.iss.net/xforce/xfdb/17792

来源: www.mail-archive.com
链接:http://www.mail-archive.com/speedtouch@ml.free.fr/msg06688.html

来源: speedtouch.sourceforge.net
链接:http://speedtouch.sourceforge.net/index.php?/news.en.html

来源: sourceforge.net
链接:http://sourceforge.net/project/showfiles.php?group_id=32758&package_id=28264&release_id=271734