Linux setsid函数 拒绝服务攻击漏洞

漏洞信息详情

Linux setsid函数 拒绝服务攻击漏洞

• CNNVD编号：CNNVD-200503-068
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2005-0178
  
• 漏洞类型：
  
  
  资料不足
  
• 发布时间：
  
  2005-03-07
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2007-05-16
  
• 厂        商：
  
  linux
• 漏洞来源：
  Discovery of these…

Linux 2.6.8.1之前版本的setsid函数中存在竞争状态，本地用户可以实施拒绝服务攻击(崩溃)，并且有可能访问TTY更改、锁定和信号灯相关的部分内核内存。

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：
RedHat Fedora Core1
RedHat kernel-2.4.22-1.2199.5.legacy.nptl.athlon.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-2.4.22-1 .2199.5.legacy.nptl.athlon.rpm
RedHat kernel-2.4.22-1.2199.5.legacy.nptl.i586.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-2.4.22-1 .2199.5.legacy.nptl.i586.rpm
RedHat kernel-2.4.22-1.2199.5.legacy.nptl.i686.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-2.4.22-1 .2199.5.legacy.nptl.i686.rpm
RedHat kernel-BOOT-2.4.22-1.2199.5.legacy.nptl.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-BOOT-2.4 .22-1.2199.5.legacy.nptl.i386.rpm
RedHat kernel-doc-2.4.22-1.2199.5.legacy.nptl.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-doc-2.4. 22-1.2199.5.legacy.nptl.i386.rpm
RedHat kernel-smp-2.4.22-1.2199.5.legacy.nptl.athlon.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-smp-2.4. 22-1.2199.5.legacy.nptl.athlon.rpm
RedHat kernel-smp-2.4.22-1.2199.5.legacy.nptl.i586.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-smp-2.4. 22-1.2199.5.legacy.nptl.i586.rpm
RedHat kernel-smp-2.4.22-1.2199.5.legacy.nptl.i686.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-smp-2.4. 22-1.2199.5.legacy.nptl.i686.rpm
RedHat kernel-source-2.4.22-1.2199.5.legacy.nptl.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-source-2 .4.22-1.2199.5.legacy.nptl.i386.rpm

来源: REDHAT
名称: RHSA-2005:092
链接:http://www.redhat.com/support/errata/RHSA-2005-092.html

来源: linux.bkbits.net:8080
链接:http://linux.bkbits.net:8080/linux-2.6/cset@41ddda70CWJb5nNL71T4MOlG2sMG8A

来源: BID
名称: 12598
链接:http://www.securityfocus.com/bid/12598

来源: BUGTRAQ
名称: 20050215 [USN-82-1] Linux kernel vulnerabilities
链接:http://marc.theaimsgroup.com/?l=full-disclosure&m=110846102231365&w=2

来源: CONECTIVA
名称: CLA-2005:930
链接:http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930