Dia 文件名 远程格式化字符串漏洞

漏洞信息详情

Dia 文件名 远程格式化字符串漏洞

• CNNVD编号：CNNVD-200605-346
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2006-2480
  
• 漏洞类型：
  
  
  格式化字符串
  
• 发布时间：
  
  2006-05-19
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2006-08-28
  
• 厂        商：
  
  dia
• 漏洞来源：
  Discovery is credi…

Dia 0.94存在格式化字符串漏洞。用户协助的攻击者可以通过触发错误或警告来引起拒绝服务(崩溃)，比如借助 .bmp文件名中的格式化字符串限定符。注意： 原来的利用方式是通过命令行自变量体现的，但还存在由Dia自动处理的其他输入机制，例如特制的.dia文件。

DIA DIA 0.94
Mandriva dia-0.94-6.4.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download
Mandriva dia-0.94-6.4.20060mdk.src.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download
Mandriva dia-0.94-6.4.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://www.mandriva.com/en/download
RedHat dia-0.94-16.fc4.i386.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
RedHat dia-0.94-16.fc4.ppc.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
RedHat dia-0.94-16.fc4.src.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
RedHat dia-0.94-16.fc4.x86_64.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
RedHat dia-debuginfo-0.94-16.fc4.i386.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
RedHat dia-debuginfo-0.94-16.fc4.ppc.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
RedHat dia-debuginfo-0.94-16.fc4.x86_64.rpm
Fedora Core 4
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
Ubuntu dia-common_0.94.0-11ubuntu1.2_all.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-common_0.94.0-11 ubuntu1.2_all.deb
Ubuntu dia-common_0.94.0-5ubuntu1.3_all.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-common_0.94.0-5u buntu1.3_all.deb
Ubuntu dia-gnome_0.94.0-11ubuntu1.2_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.94.0-11u buntu1.2_amd64.deb
Ubuntu dia-gnome_0.94.0-11ubuntu1.2_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.94.0-11u buntu1.2_i386.deb
Ubuntu dia-gnome_0.94.0-11ubuntu1.2_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.94.0-11u buntu1.2_powerpc.deb
Ubuntu dia-gnome_0.94.0-5ubuntu1.3_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.94.0-5ub untu1.3_amd64.deb
Ubuntu dia-gnome_0.94.0-5ubuntu1.3_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.94.0-5ub untu1.3_i386.deb
Ubuntu dia-gnome_0.94.0-5ubuntu1.3_powerpc.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-gnome_0.94.0-5ub untu1.3_powerpc.deb
Ubuntu dia-libs_0.94.0-11ubuntu1.2_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.94.0-11ub untu1.2_amd64.deb
Ubuntu dia-libs_0.94.0-11ubuntu1.2_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.94.0-11ub untu1.2_i386.deb
Ubuntu dia-libs_0.94.0-11ubuntu1.2_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.94.0-11ub untu1.2_powerpc.deb
Ubuntu dia-libs_0.94.0-5ubuntu1.3_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.94.0-5ubu ntu1.3_amd64.deb
Ubuntu dia-libs_0.94.0-5ubuntu1.3_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.94.0-5ubu ntu1.3_i386.deb
Ubuntu dia-libs_0.94.0-5ubuntu1.3_powerpc.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/d/dia/dia-libs_0.94.0-5ubu ntu1.3_powerpc.deb
Ubuntu dia_0.94.0-11ubuntu1.2_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.94.0-11ubu ntu1.2_amd64.deb
Ubuntu dia_0.94.0-11ubuntu1.2_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.94.0-11ubu ntu1.2_i386.deb
Ubuntu dia_0.94.0-11ubuntu1.2_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.94.0-11ubu ntu1.2_powerpc.deb
Ubuntu dia_0.94.0-5ubuntu1.3_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.94.0-5ubun tu1.3_amd64.deb
Ubuntu dia_0.94.0-5ubuntu1.3_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.94.0-5ubun tu1.3_i386.deb
Ubuntu dia_0.94.0-5ubuntu1.3_powerpc.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/universe/d/dia/dia_0.94.0-5ubun tu1.3_powerpc.deb
DIA DIA 0.92.2
Mandriva dia-0.92.2-2.3.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download
Mandriva dia-0.92.2-2.3.C30mdk.src.rpm
Corporate 3.0:
http://www.mandriva.com/en/download
Mandriva dia-0.92.2-2.3.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download

来源: VUPEN

名称: ADV-2006-1908

链接:http://www.frsirt.com/english/advisories/2006/1908

来源: SECUNIA

名称: 20254

链接:http://secunia.com/advisories/20254

来源: UBUNTU

名称: USN-286-1

链接:http://www.ubuntulinux.org/support/documentation/usn/usn-286-1

来源: BID

名称: 18078

链接:http://www.securityfocus.com/bid/18078

来源: VULN-DEV

名称: 20060506 DIA file name handling format string

链接:http://www.securityfocus.com/archive/82/433313/30/0/threaded

来源: REDHAT

名称: RHSA-2006:0541

链接:http://www.redhat.com/support/errata/RHSA-2006-0541.html

来源: OSVDB

名称: 25699

链接:http://www.osvdb.org/25699

来源: SUSE

名称: SUSE-SR:2006:012

链接:http://www.novell.com/linux/security/advisories/2006-06-02.html

来源: GENTOO

名称: GLSA-200606-03

链接:http://www.gentoo.org/security/en/glsa/glsa-200606-03.xml

来源: SECTRACK

名称: 1016203

链接:http://securitytracker.com/id?1016203

来源: SECUNIA

名称: 20513

链接:http://secunia.com/advisories/20513

来源: SECUNIA

名称: 20457

链接:http://secunia.com/advisories/20457

来源: SECUNIA

名称: 20422

链接:http://secunia.com/advisories/20422

来源: SECUNIA

名称: 20339

链接:http://secunia.com/advisories/20339

来源: SECUNIA

名称: 20199

链接:http://secunia.com/advisories/20199

来源: MISC

链接:http://kandangjamur.net/tutorial/dia.txt

来源: MANDRIVA

名称: MDKSA-2006:093

链接:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:093

来源: bugzilla.gnome.org

链接:http://bugzilla.gnome.org/show_bug.cgi?id=342111

来源: MANDRIVA

名称: MDKSA-2006:093

链接:http://www.mandriva.com/security/advisories?name=MDKSA-2006:093