Ecartis远程未公开权限提升漏洞

漏洞信息详情

Ecartis远程未公开权限提升漏洞

• CNNVD编号：CNNVD-200412-1018
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2004-0913
  
• 漏洞类型：
  
  
  未知
  
• 发布时间：
  
  2004-12-31
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  ecartis
• 漏洞来源：
  This vulnerability…

ecartis 0.129a+1.0.0-snap20020514-1.3以前的0.x版本和1.0.0+cvs.20030911-8以前的1.x版本存在未知的漏洞。在同一个域中的远程攻击者利用该漏洞获取管理员特权且修改配置。

Debian has released an advisory (DSA 572-1) and fixes to address this vulnerability. Please see the referenced advisory for further information.
Ecartis Ecartis 1.0 .0 snapshot 20020514

• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_alpha.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1
  29a+1.0.0-snap20020514-1.3_alpha.deb
• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_arm.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1
  29a+1.0.0-snap20020514-1.3_arm.deb
• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_hppa.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1
  29a+1.0.0-snap20020514-1.3_hppa.deb
• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_i386.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1
  29a+1.0.0-snap20020514-1.3_i386.deb
• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_ia64.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1
  29a+1.0.0-snap20020514-1.3_ia64.deb
• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_m68k.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1
  29a+1.0.0-snap20020514-1.3_m68k.deb
• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_mips.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1
  29a+1.0.0-snap20020514-1.3_mips.deb
• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_mipsel.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1
  29a+1.0.0-snap20020514-1.3_mipsel.deb
• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_powerpc.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1
  29a+1.0.0-snap20020514-1.3_powerpc.deb
• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_s390.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1
  29a+1.0.0-snap20020514-1.3_s390.deb
• Debian ecartis-cgi_0.129a+1.0.0-snap20020514-1.3_sparc.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis-cgi_0.1
  29a+1.0.0-snap20020514-1.3_sparc.deb
• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_alpha.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+
  1.0.0-snap20020514-1.3_alpha.deb
• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_arm.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+
  1.0.0-snap20020514-1.3_arm.deb
• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_hppa.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+
  1.0.0-snap20020514-1.3_hppa.deb
• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_i386.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+
  1.0.0-snap20020514-1.3_i386.deb
• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_ia64.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+
  1.0.0-snap20020514-1.3_ia64.deb
• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_m68k.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+
  1.0.0-snap20020514-1.3_m68k.deb
• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_mips.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+
  1.0.0-snap20020514-1.3_mips.deb
• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_mipsel.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+
  1.0.0-snap20020514-1.3_mipsel.deb
• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_powerpc.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+
  1.0.0-snap20020514-1.3_powerpc.deb
• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_s390.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+
  1.0.0-snap20020514-1.3_s390.deb
• Debian ecartis_0.129a+1.0.0-snap20020514-1.3_sparc.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/e/ecartis/ecartis_0.129a+
  1.0.0-snap20020514-1.3_sparc.deb

来源: BID
名称: 11487
链接:http://www.securityfocus.com/bid/11487

来源: DEBIAN
名称: DSA-572
链接:http://www.debian.org/security/2004/dsa-572

来源: AUSCERT
名称: ESB-2004.0669
链接:http://www.auscert.org.au/render.html?it=4491

来源: XF
名称: ecartis-gain-privileges(17809)
链接:http://xforce.iss.net/xforce/xfdb/17809

来源: SECUNIA
名称: 12918
链接:http://secunia.com/advisories/12918/