发布日期：2002-01-29
更新日期：2002-02-01

受影响系统：

SAS Software Integration Technologies 8.1
SAS Software Integration Technologies 8.0
SAS Software Base 8.1
SAS Software Base 8.0

不受影响系统：

SAS Software Integration Technologies 8.2
SAS Software Base 8.2

描述：

---

BUGTRAQ  ID: 3979
CVE(CAN) ID: CVE-2002-0219

SAS Software提供了对数据分析、报告生成、企业级的信息传递的工具和解决方案，软件有Unix、Linux及Windows下的版本。sastcpd是SAS Software软件架构中的任务生成程序。

sastcpd程序存在输入验证漏洞，可以使本地攻击者通过溢出攻击得到主机的管理员权限。

当sastcpd处理一个长约1200字节的命令行参数时，就会发生缓冲区溢出，导致堆栈变量重写执行攻击者指定的任意指令。因为sastcpd一般是以suid root安装的，指令将以root的身份被执行。

<*来源：Wodahs Latigid （wodahs@mail.com）
  
  链接：http://archives.neohapsis.com/archives/bugtraq/2002-01/0352.html
        http://archives.neohapsis.com/archives/bugtraq/2002-01/0349.html
        http://archives.neohapsis.com/archives/bugtraq/2002-01/0350.html
        http://www.sas.com/service/techsup/unotes/SN/004/004201.html
*>

建议：

---

临时解决方法：

如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁：

* 暂时去掉sastcpd程序的suid root位，可以使用如下命令：

# chmod a-s sastcpd

厂商补丁：

SAS Software
------------
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

SAS Base 8.0:

SAS Hotfix 82ba10os.exe
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/mvs/82ba10os.exe

OS/390 Platform
SAS Hotfix 82ba10cm.vmarc
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/cms/82ba10cm.vmarc

CMS Platform
SAS Hotfix 82ba10wn.exe
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/win/82ba10wn.exe

Windows Platform
SAS Hotfix 82ba10o2.exe
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/os2/82ba10o2.exe

OS/2 Platform
SAS Hotfix 82ba10av.zip
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/alp/82ba10av.zip

OpenVMS Alpha Platform
SAS Hotfix 82ba10vm.zip
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/vax/82ba10vm.zip

OpenVMS VAX Platform
SAS Hotfix 82ba10s2.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/slx/82ba10s2.tar

Solaris Platform
SAS Hotfix 82ba10s6.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/s64/82ba10s6.tar

Solaris 64bit Platform
SAS Hotfix 82ba10h8.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/h8x/82ba10h8.tar

HP-UX Platform
SAS Hotfix 82ba10h6.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/h64/82ba10h6.tar

HP-UX 64bit Platform
SAS Hotfix 82ba10ar.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/r6x/82ba10ar.tar

AIX Platform
SAS Hotfix 82ba10r6.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/r64/82ba10r6.tar

AIX 64bit Platform
SAS Hotfix 82ba10ap.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/alx/82ba10ap.tar

Tru64 Platform
SAS Hotfix 82ba10lx.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/lnx/82ba10lx.tar

Linux Platform
SAS Hotfix 82ba10sg.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/sgi/82ba10sg.tar

IRIX Platform
SAS Hotfix 82ba10ia.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/iab/82ba10ia.tar

ABI+ Intel Platform
SAS Integration Technologies 8.0:
SAS Integration Technologies 8.1:


SAS Base 8.1:

SAS Hotfix 82ba10os.exe
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/mvs/82ba10os.exe

OS/390 Platform
SAS Hotfix 82ba10cm.vmarc
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/cms/82ba10cm.vmarc

CMS Platform
SAS Hotfix 82ba10wn.exe
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/win/82ba10wn.exe

Windows Platform
SAS Hotfix 82ba10o2.exe
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/os2/82ba10o2.exe

OS/2 Platform
SAS Hotfix 82ba10av.zip
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/alp/82ba10av.zip

OpenVMS Alpha Platform
SAS Hotfix 82ba10vm.zip
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/vax/82ba10vm.zip

OpenVMS VAX Platform
SAS Hotfix 82ba10s2.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/slx/82ba10s2.tar

Solaris Platform
SAS Hotfix 82ba10s6.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/s64/82ba10s6.tar

Solaris 64bit Platform
SAS Hotfix 82ba10h8.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/h8x/82ba10h8.tar

HP-UX Platform
SAS Hotfix 82ba10h6.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/h64/82ba10h6.tar

HP-UX 64bit Platform
SAS Hotfix 82ba10ar.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/r6x/82ba10ar.tar

AIX Platform
SAS Hotfix 82ba10r6.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/r64/82ba10r6.tar

AIX 64bit Platform
SAS Hotfix 82ba10ap.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/alx/82ba10ap.tar

Tru64 Platform
SAS Hotfix 82ba10lx.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/lnx/82ba10lx.tar

Linux Platform
SAS Hotfix 82ba10sg.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/sgi/82ba10sg.tar

IRIX Platform
SAS Hotfix 82ba10ia.tar
http://ftp.sas.com/techsup/download/hotfix/v82/base/82ba10/iab/82ba10ia.tar

浏览次数：3239
严重程度：0（网友投票）