首页 -> 安全研究
安全研究
安全漏洞
SAS SASTCPD本地命令行缓冲区溢出漏洞
发布日期:2002-01-29
更新日期:2002-02-01
受影响系统:
SAS Software Integration Technologies 8.1不受影响系统:
SAS Software Integration Technologies 8.0
SAS Software Base 8.1
SAS Software Base 8.0
SAS Software Integration Technologies 8.2描述:
SAS Software Base 8.2
BUGTRAQ ID: 3979
CVE(CAN) ID: CVE-2002-0219
SAS Software提供了对数据分析、报告生成、企业级的信息传递的工具和解决方案,软件有Unix、Linux及Windows下的版本。sastcpd是SAS Software软件架构中的任务生成程序。
sastcpd程序存在输入验证漏洞,可以使本地攻击者通过溢出攻击得到主机的管理员权限。
当sastcpd处理一个长约1200字节的命令行参数时,就会发生缓冲区溢出,导致堆栈变量重写执行攻击者指定的任意指令。因为sastcpd一般是以suid root安装的,指令将以root的身份被执行。
<*来源:Wodahs Latigid (wodahs@mail.com)
链接:http://archives.neohapsis.com/archives/bugtraq/2002-01/0352.html
http://archives.neohapsis.com/archives/bugtraq/2002-01/0349.html
http://archives.neohapsis.com/archives/bugtraq/2002-01/0350.html
http://www.sas.com/service/techsup/unotes/SN/004/004201.html
*>
建议:
临时解决方法:
如果您不能立刻安装补丁或者升级,NSFOCUS建议您采取以下措施以降低威胁:
* 暂时去掉sastcpd程序的suid root位,可以使用如下命令:
# chmod a-s sastcpd
厂商补丁:
SAS Software
------------
目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:
SAS Base 8.0:
SAS Hotfix 82ba10os.exe
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/mvs/82ba10os.exe
OS/390 Platform
SAS Hotfix 82ba10cm.vmarc
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/cms/82ba10cm.vmarc
CMS Platform
SAS Hotfix 82ba10wn.exe
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/win/82ba10wn.exe
Windows Platform
SAS Hotfix 82ba10o2.exe
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/os2/82ba10o2.exe
OS/2 Platform
SAS Hotfix 82ba10av.zip
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/alp/82ba10av.zip
OpenVMS Alpha Platform
SAS Hotfix 82ba10vm.zip
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/vax/82ba10vm.zip
OpenVMS VAX Platform
SAS Hotfix 82ba10s2.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/slx/82ba10s2.tar
Solaris Platform
SAS Hotfix 82ba10s6.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/s64/82ba10s6.tar
Solaris 64bit Platform
SAS Hotfix 82ba10h8.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/h8x/82ba10h8.tar
HP-UX Platform
SAS Hotfix 82ba10h6.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/h64/82ba10h6.tar
HP-UX 64bit Platform
SAS Hotfix 82ba10ar.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/r6x/82ba10ar.tar
AIX Platform
SAS Hotfix 82ba10r6.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/r64/82ba10r6.tar
AIX 64bit Platform
SAS Hotfix 82ba10ap.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/alx/82ba10ap.tar
Tru64 Platform
SAS Hotfix 82ba10lx.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/lnx/82ba10lx.tar
Linux Platform
SAS Hotfix 82ba10sg.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/sgi/82ba10sg.tar
IRIX Platform
SAS Hotfix 82ba10ia.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/iab/82ba10ia.tar
ABI+ Intel Platform
SAS Integration Technologies 8.0:
SAS Integration Technologies 8.1:
SAS Base 8.1:
SAS Hotfix 82ba10os.exe
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/mvs/82ba10os.exe
OS/390 Platform
SAS Hotfix 82ba10cm.vmarc
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/cms/82ba10cm.vmarc
CMS Platform
SAS Hotfix 82ba10wn.exe
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/win/82ba10wn.exe
Windows Platform
SAS Hotfix 82ba10o2.exe
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/os2/82ba10o2.exe
OS/2 Platform
SAS Hotfix 82ba10av.zip
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/alp/82ba10av.zip
OpenVMS Alpha Platform
SAS Hotfix 82ba10vm.zip
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/vax/82ba10vm.zip
OpenVMS VAX Platform
SAS Hotfix 82ba10s2.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/slx/82ba10s2.tar
Solaris Platform
SAS Hotfix 82ba10s6.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/s64/82ba10s6.tar
Solaris 64bit Platform
SAS Hotfix 82ba10h8.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/h8x/82ba10h8.tar
HP-UX Platform
SAS Hotfix 82ba10h6.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/h64/82ba10h6.tar
HP-UX 64bit Platform
SAS Hotfix 82ba10ar.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/r6x/82ba10ar.tar
AIX Platform
SAS Hotfix 82ba10r6.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/r64/82ba10r6.tar
AIX 64bit Platform
SAS Hotfix 82ba10ap.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/alx/82ba10ap.tar
Tru64 Platform
SAS Hotfix 82ba10lx.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/lnx/82ba10lx.tar
Linux Platform
SAS Hotfix 82ba10sg.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/sgi/82ba10sg.tar
IRIX Platform
SAS Hotfix 82ba10ia.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/iab/82ba10ia.tar
浏览次数:3239
严重程度:0(网友投票)
绿盟科技给您安全的保障