EMC Dantz Retrospect 客户端 远程缓冲区溢出漏洞

漏洞信息详情

EMC Dantz Retrospect 客户端 远程缓冲区溢出漏洞

• CNNVD编号：CNNVD-200605-282
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2006-2391
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2006-05-15
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2006-11-30
  
• 厂        商：
  
  emc
• 漏洞来源：
  Nicolas Pouvesle S…

EMC Dantz Retrospect是为中小企业设计的备份和灾难恢复系统。

Retrospect客户端软件存在远程缓冲区溢出漏洞，攻击者可以通过向497端口发送畸形报文导致执行任意指令。此漏洞仅影响Retrospect客户端。

目前厂商还没有提供补丁或者升级程序，建议使用此软件的用户随时关注厂商的主页以获取最新版本：
Retrospect Client for Windows 7.5:

http://download.dantz.com/archives/Retro-EN_7_5_116.exe

Retrospect Client for Windows 7.0:

http://download.dantz.com/archives/RetroClient-EN_7_0_112.exe
Retrospect Client for Windows 6.5:

>
http://download.dantz.com/archives/RetroClient-EN_6_5_140.exe

Retrospect Client for Macintosh 6.1:

http://download.dantz.com/archives/Client_OS_X-6_1_130.dmg
Retrospect Client for Macintosh 5.1:

http://download.dantz.com/archives/Classic-Client-EN_5_1_180.sit
Retrospect Client for Linux 7.5:

(rpm) –
http://download.dantz.com/archives/retroclient-75_linux.rpm

(tar) –
http://download.dantz.com/archives/retroclient-75_linux.tar
Retrospect Client for Linux 7.0:

(rpm) –
http://download.dantz.com/archives/retroclient-70_linux.rpm
(tar) –
http://download.dantz.com/archives/retroclient-70_linux.tar

Retrospect Client for Linux 6.5:

(rpm) –
http://download.dantz.com/archives/retroclient-65_linux.rpm
(tar) – http://download.dantz.com/archives/retroclient-65_linux.tar” target=”_blank”>
http://download.dantz.com/archives/retroclient-65_linux.tar
Retrospect Client for Solaris 7.5:

http://download.dantz.com/archives/retroclient-65_linux.tar” target=”_blank”>
(pkg) –
http://download.dantz.com/archives/retroclient-75_solaris.pkg
(tar) – http://download.dantz.com/archives/retroclient-75_solaris.tar” target=”_blank”>
http://download.dantz.com/archives/retroclient-75_solaris.tar
Retrospect Client for Solaris 7.0:

http://download.dantz.com/archives/retroclient-75_solaris.tar” target=”_blank”>

http://download.dantz.com/archives/retroclient-75_solaris.tar” target=”_blank”>(pkg) –
http://download.dantz.com/archives/retroclient-70_solaris.pkg
(tar) –
http://download.dantz.com/archives/retroclient-70_solaris.tar
Retrospect Client for Solaris 6.5:

http://download.dantz.com/archives/retroclient-75_solaris.tar” target=”_blank”>

http://download.dantz.com/archives/retroclient-75_solaris.tar” target=”_blank”>(pkg) –
http://download.dantz.com/archives/retroclient-65_solaris.pkg

http://download.dantz.com/archives/retroclient-75_solaris.tar” target=”_blank”>(tar) –
http://download.dantz.com/archives/retroclient-65_solaris.tar
Retrospect Client for NetWare 1.0:

http://download.dantz.com/archives/retroclient-75_solaris.tar” target=”_blank”>
http://download.dantz.com/archives/Novell-70.zip

链接:http://www.kb.cert.org/vuls/id/186944

来源: BID

名称: 17948

链接:http://www.securityfocus.com/bid/17948

来源: VUPEN

名称: ADV-2006-1766

链接:http://www.frsirt.com/english/advisories/2006/1766

来源: SECTRACK

名称: 1016136

链接:http://securitytracker.com/id?1016136

来源: SECTRACK

名称: 1016063

链接:http://securitytracker.com/id?1016063

来源: SECUNIA

名称: 20080

链接:http://secunia.com/advisories/20080

来源: BID

名称: 18064

链接:http://www.securityfocus.com/bid/18064

来源: BUGTRAQ

名称: 20060522 ACROS Security: Buffer Overflow In EMC (previously Dantz) Retroclient Service

链接:http://www.securityfocus.com/archive/1/archive/1/434726/100/0/threaded

来源: MISC

链接:http://www.acrossecurity.com/aspr/ASPR-2006-05-17-1-PUB.txt

来源: kb.dantz.com

链接:http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=9511

来源: XF

名称: retrospect-client-bo(26380)

链接:http://xforce.iss.net/xforce/xfdb/26380