发布日期：2001-06-05
更新日期：2001-06-11

受影响系统：

Ken Stevens ispell 3.1.20
   - RedHat Linux 6.2 - alpha, i386, sparc
   - RedHat Linux 5.2 - alpha, i386, sparc

描述：

---

BUGTRAQ ID : 2827

ispell使用mktemp/fopen来创建临时文件，这样产生的临时文件的名字通常是可以预测
的。恶意用户可以在/tmp下以猜测的文件名创建符号链接，当ispell被特权用户运行时，
就可能覆盖或者创建链接所指向的文件。

本地攻击者可能利用此漏洞获取root权限。

<*来源：[RHSA-2001:074-03] Updated ispell packages available for Red Hat Linux 5.2 and 6.2 *>


建议：

---

厂商补丁：

RedHat Linux (http://www.redhat.com/)为此发布了一份安全公告 ：
[RHSA-2001:074-03] Updated ispell packages available for Red Hat Linux 5.2 and 6.2

补丁下载 -
________________________________________________________________________
Red Hat Linux 5.2:

SRPMS:
ftp://updates.redhat.com/5.2/en/os/SRPMS/ispell-3.1.20-26.52.src.rpm

alpha:
ftp://updates.redhat.com/5.2/en/os/alpha/ispell-3.1.20-26.52.alpha.rpm
ftp://updates.redhat.com/5.2/en/os/alpha/ispell-catalan-3.1.20-26.52.alpha.rpm
ftp://updates.redhat.com/5.2/en/os/alpha/ispell-czech-3.1.20-26.52.alpha.rpm
ftp://updates.redhat.com/5.2/en/os/alpha/ispell-danish-3.1.20-26.52.alpha.rpm
ftp://updates.redhat.com/5.2/en/os/alpha/ispell-dutch-3.1.20-26.52.alpha.rpm
ftp://updates.redhat.com/5.2/en/os/alpha/ispell-esperanto-3.1.20-26.52.alpha.rpm
ftp://updates.redhat.com/5.2/en/os/alpha/ispell-french-3.1.20-26.52.alpha.rpm
ftp://updates.redhat.com/5.2/en/os/alpha/ispell-german-3.1.20-26.52.alpha.rpm
ftp://updates.redhat.com/5.2/en/os/alpha/ispell-greek-3.1.20-26.52.alpha.rpm
ftp://updates.redhat.com/5.2/en/os/alpha/ispell-italian-3.1.20-26.52.alpha.rpm
ftp://updates.redhat.com/5.2/en/os/alpha/ispell-norwegian-3.1.20-26.52.alpha.rpm
ftp://updates.redhat.com/5.2/en/os/alpha/ispell-polish-3.1.20-26.52.alpha.rpm
ftp://updates.redhat.com/5.2/en/os/alpha/ispell-portuguese-3.1.20-26.52.alpha.rpm
ftp://updates.redhat.com/5.2/en/os/alpha/ispell-russian-3.1.20-26.52.alpha.rpm
ftp://updates.redhat.com/5.2/en/os/alpha/ispell-spanish-3.1.20-26.52.alpha.rpm
ftp://updates.redhat.com/5.2/en/os/alpha/ispell-swedish-3.1.20-26.52.alpha.rpm
ftp://updates.redhat.com/5.2/en/os/alpha/ispell-dicts-3.1.20-26.52.alpha.rpm

i386:
ftp://updates.redhat.com/5.2/en/os/i386/ispell-3.1.20-26.52.i386.rpm
ftp://updates.redhat.com/5.2/en/os/i386/ispell-catalan-3.1.20-26.52.i386.rpm
ftp://updates.redhat.com/5.2/en/os/i386/ispell-czech-3.1.20-26.52.i386.rpm
ftp://updates.redhat.com/5.2/en/os/i386/ispell-danish-3.1.20-26.52.i386.rpm
ftp://updates.redhat.com/5.2/en/os/i386/ispell-dutch-3.1.20-26.52.i386.rpm
ftp://updates.redhat.com/5.2/en/os/i386/ispell-esperanto-3.1.20-26.52.i386.rpm
ftp://updates.redhat.com/5.2/en/os/i386/ispell-french-3.1.20-26.52.i386.rpm
ftp://updates.redhat.com/5.2/en/os/i386/ispell-german-3.1.20-26.52.i386.rpm
ftp://updates.redhat.com/5.2/en/os/i386/ispell-greek-3.1.20-26.52.i386.rpm
ftp://updates.redhat.com/5.2/en/os/i386/ispell-italian-3.1.20-26.52.i386.rpm
ftp://updates.redhat.com/5.2/en/os/i386/ispell-norwegian-3.1.20-26.52.i386.rpm
ftp://updates.redhat.com/5.2/en/os/i386/ispell-polish-3.1.20-26.52.i386.rpm
ftp://updates.redhat.com/5.2/en/os/i386/ispell-portuguese-3.1.20-26.52.i386.rpm
ftp://updates.redhat.com/5.2/en/os/i386/ispell-russian-3.1.20-26.52.i386.rpm
ftp://updates.redhat.com/5.2/en/os/i386/ispell-spanish-3.1.20-26.52.i386.rpm
ftp://updates.redhat.com/5.2/en/os/i386/ispell-swedish-3.1.20-26.52.i386.rpm
ftp://updates.redhat.com/5.2/en/os/i386/ispell-dicts-3.1.20-26.52.i386.rpm

sparc:
ftp://updates.redhat.com/5.2/en/os/sparc/ispell-3.1.20-26.52.sparc.rpm
ftp://updates.redhat.com/5.2/en/os/sparc/ispell-catalan-3.1.20-26.52.sparc.rpm
ftp://updates.redhat.com/5.2/en/os/sparc/ispell-czech-3.1.20-26.52.sparc.rpm
ftp://updates.redhat.com/5.2/en/os/sparc/ispell-danish-3.1.20-26.52.sparc.rpm
ftp://updates.redhat.com/5.2/en/os/sparc/ispell-dutch-3.1.20-26.52.sparc.rpm
ftp://updates.redhat.com/5.2/en/os/sparc/ispell-esperanto-3.1.20-26.52.sparc.rpm
ftp://updates.redhat.com/5.2/en/os/sparc/ispell-french-3.1.20-26.52.sparc.rpm
ftp://updates.redhat.com/5.2/en/os/sparc/ispell-german-3.1.20-26.52.sparc.rpm
ftp://updates.redhat.com/5.2/en/os/sparc/ispell-greek-3.1.20-26.52.sparc.rpm
ftp://updates.redhat.com/5.2/en/os/sparc/ispell-italian-3.1.20-26.52.sparc.rpm
ftp://updates.redhat.com/5.2/en/os/sparc/ispell-norwegian-3.1.20-26.52.sparc.rpm
ftp://updates.redhat.com/5.2/en/os/sparc/ispell-polish-3.1.20-26.52.sparc.rpm
ftp://updates.redhat.com/5.2/en/os/sparc/ispell-portuguese-3.1.20-26.52.sparc.rpm
ftp://updates.redhat.com/5.2/en/os/sparc/ispell-russian-3.1.20-26.52.sparc.rpm
ftp://updates.redhat.com/5.2/en/os/sparc/ispell-spanish-3.1.20-26.52.sparc.rpm
ftp://updates.redhat.com/5.2/en/os/sparc/ispell-swedish-3.1.20-26.52.sparc.rpm
ftp://updates.redhat.com/5.2/en/os/sparc/ispell-dicts-3.1.20-26.52.sparc.rpm

Red Hat Linux 6.2:

SRPMS:
ftp://updates.redhat.com/6.2/en/os/SRPMS/ispell-3.1.20-27.src.rpm

alpha:
ftp://updates.redhat.com/6.2/en/os/alpha/ispell-3.1.20-27.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/ispell-catalan-3.1.20-27.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/ispell-czech-3.1.20-27.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/ispell-danish-3.1.20-27.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/ispell-dutch-3.1.20-27.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/ispell-esperanto-3.1.20-27.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/ispell-french-3.1.20-27.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/ispell-german-3.1.20-27.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/ispell-greek-3.1.20-27.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/ispell-italian-3.1.20-27.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/ispell-norwegian-3.1.20-27.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/ispell-polish-3.1.20-27.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/ispell-portuguese-3.1.20-27.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/ispell-russian-3.1.20-27.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/ispell-spanish-3.1.20-27.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/ispell-swedish-3.1.20-27.alpha.rpm
ftp://updates.redhat.com/6.2/en/os/alpha/ispell-dicts-3.1.20-27.alpha.rpm

i386:
ftp://updates.redhat.com/6.2/en/os/i386/ispell-3.1.20-27.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/ispell-catalan-3.1.20-27.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/ispell-czech-3.1.20-27.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/ispell-danish-3.1.20-27.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/ispell-dutch-3.1.20-27.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/ispell-esperanto-3.1.20-27.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/ispell-french-3.1.20-27.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/ispell-german-3.1.20-27.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/ispell-greek-3.1.20-27.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/ispell-italian-3.1.20-27.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/ispell-norwegian-3.1.20-27.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/ispell-polish-3.1.20-27.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/ispell-portuguese-3.1.20-27.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/ispell-russian-3.1.20-27.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/ispell-spanish-3.1.20-27.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/ispell-swedish-3.1.20-27.i386.rpm
ftp://updates.redhat.com/6.2/en/os/i386/ispell-dicts-3.1.20-27.i386.rpm

sparc:
ftp://updates.redhat.com/6.2/en/os/sparc/ispell-3.1.20-27.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/ispell-catalan-3.1.20-27.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/ispell-czech-3.1.20-27.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/ispell-danish-3.1.20-27.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/ispell-dutch-3.1.20-27.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/ispell-esperanto-3.1.20-27.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/ispell-french-3.1.20-27.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/ispell-german-3.1.20-27.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/ispell-greek-3.1.20-27.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/ispell-italian-3.1.20-27.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/ispell-norwegian-3.1.20-27.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/ispell-polish-3.1.20-27.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/ispell-portuguese-3.1.20-27.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/ispell-russian-3.1.20-27.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/ispell-spanish-3.1.20-27.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/ispell-swedish-3.1.20-27.sparc.rpm
ftp://updates.redhat.com/6.2/en/os/sparc/ispell-dicts-3.1.20-27.sparc.rpm
________________________________________________________________________


浏览次数：3861
严重程度：0（网友投票）