发布日期：2002-01-30
更新日期：2002-02-04

受影响系统：

Compaq Tru64 5.1a
Compaq Tru64 5.1 PK4 (BL18)
Compaq Tru64 5.1 PK3 (BL17)
Compaq Tru64 5.0a PK3 (BL17)
Compaq Tru64 5.0 PK4 (BL17)
Compaq Tru64 5.0
Compaq Tru64 4.0g PK3 (BL17)
Compaq Tru64 4.0g
Compaq Tru64 4.0f PK7 (BL18)
Compaq Tru64 4.0f PK6 (BL17)
Compaq Tru64 4.0f
Compaq Tru64 4.0d PK9 (BL17)
Compaq Tru64 4.0d

不受影响系统：

描述：

---

BUGTRAQ  ID: 3996

Tru64是Unix操作系统的一种变体，由Compaq公司负责分发、维护。

Compaq Tru64 Unix内核包含一个竞争条件漏洞。

本地攻击者可以利用这个漏洞修改文件系统中任意文件。于是可以通过修改/etc/passwd、/etc/shadow等文件获取root权限。

<**>

建议：

---

临时解决方法：

如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁：

* 加强本地权限管理，严格控制本地用户。

厂商补丁：

Compaq
------
目前厂商已经发布了升级补丁以修复这个安全问题，请到以下地址下载：

Compaq Tru64 4.0g PK3 (BL17):

Compaq Patch T64V40GB17-C0009303-12856-E-20020115.tar
http://ftp1.support.compaq.com/public/unix/v4.0g/
The prerequisite for installing this patch kit is that you must have installed Tru64 UNIX 4.0G and PK3 (BL17).

Compaq Tru64 4.0g:
Compaq Tru64 4.0f PK7 (BL18):
Compaq Tru64 4.0f PK6 (BL17):

Compaq Patch DUV40FB17-C0061801-12860-E-20020115.tar
http://ftp1.support.compaq.com/public/unix/v4.0f/
The prerequisite for installing this patch kit is that you must have installed Tru64 UNIX 4.0F and PK6 (BL17).

Compaq Tru64 4.0f:
Compaq Tru64 4.0d PK9 (BL17):

Compaq Patch DUV40DB17-C0061401-12858-E-20020115.tar
http://ftp1.support.compaq.com/public/unix/v4.0d/
The prerequisite for installing this patch kit is that you must have installed Tru64 UNIX 4.0D and PK9 (BL17).

Compaq Tru64 4.0d:
Compaq Tru64 5.0a PK3 (BL17):

Compaq Patch T64V50AB17-C0017601-12862-E-20020115.tar
http://ftp1.support.compaq.com/public/unix/v5.0a/
The prerequisite for installing this patch kit is that you must have installed Tru64 UNIX 5.0A and PK3 (BL17).

Compaq Tru64 5.0 PK4 (BL17):

Compaq Patch T64V50B17-C0006900-12861-E-20020115.tar
http://ftp1.support.compaq.com/public/unix/v5.0/
The prerequisite for installing this patch kit is that you must have installed Tru64 UNIX 5.0 and PK4 (BL17).

Compaq Tru64 5.0:
Compaq Tru64 5.1a:
Compaq Tru64 5.1 PK4 (BL18):

Compaq Patch T64V51B18-C0094800-12864-E-20020115.tar
http://ftp1.support.compaq.com/public/unix/v5.1/
The prerequisite for installing this patch kit is that you must have installed Tru64 UNIX 5.1 and PK4 (BL18).

Compaq Tru64 5.1 PK3 (BL17):
Compaq Tru64 5.1:



浏览次数：3554
严重程度：0（网友投票）