首页 -> 安全研究
安全研究
安全漏洞
FastTrack P2P技术信息服务存在拒绝服务漏洞
发布日期:2002-02-17
更新日期:2002-02-22
受影响系统:
Fast Track KaZaA 1.2不受影响系统:
- Microsoft Windows XP Home
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
- Microsoft Windows ME
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows 2000 SP3
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP1
Fast Track KaZaA 1.3
- Microsoft Windows XP Home
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
- Microsoft Windows ME
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows 2000 SP3
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP1
Fast Track KaZaA 1.3.3
- Microsoft Windows XP Home
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
- Microsoft Windows ME
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows 2000 SP3
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP1
Fast Track KaZaA 1.4
- Microsoft Windows XP Home
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
- Microsoft Windows ME
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows 2000 SP3
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP1
Music City Networks Morpheus 1.3
- Microsoft Windows XP Home
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
- Microsoft Windows ME
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows 2000 SP3
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP1
Music City Networks Morpheus 1.3.3
- Microsoft Windows XP Home
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
- Microsoft Windows ME
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows 2000 SP3
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP1
Grokster Grokster 1.3
- Microsoft Windows XP Home
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
- Microsoft Windows ME
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows 2000 SP3
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP1
Grokster Grokster 1.3.3
- Microsoft Windows XP Home
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
- Microsoft Windows ME
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows 2000 SP3
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP1
Fast Track KaZaA 1.5描述:
- Microsoft Windows XP Home
Fast Track KaZaA 1.5
- Microsoft Windows NT 4.0 SP6a
Fast Track KaZaA 1.5
- Microsoft Windows NT 4.0 SP6
Fast Track KaZaA 1.5
- Microsoft Windows NT 4.0 SP5
Fast Track KaZaA 1.5
- Microsoft Windows NT 4.0 SP4
Fast Track KaZaA 1.5
- Microsoft Windows NT 4.0 SP3
Fast Track KaZaA 1.5
- Microsoft Windows NT 4.0 SP2
Fast Track KaZaA 1.5
- Microsoft Windows NT 4.0 SP1
Fast Track KaZaA 1.5
- Microsoft Windows NT 4.0
Fast Track KaZaA 1.5
- Microsoft Windows ME
Fast Track KaZaA 1.5
- Microsoft Windows 98
Fast Track KaZaA 1.5
- Microsoft Windows 95
Fast Track KaZaA 1.5
- Microsoft Windows 2000 SP3
Fast Track KaZaA 1.5
- Microsoft Windows 2000 Server SP2
Fast Track KaZaA 1.5
- Microsoft Windows 2000 Server SP1
BUGTRAQ ID: 4122
CVE(CAN) ID: CVE-2002-0314
KaZaA, Grokster和Morpheus是基于FastTrack P2P技术的文件共享客户端,它们运行于Microsoft Windows平台,并已经移植到Linux平台。
基于FastTrack P2P技术的文件共享客户端存在拒绝服务问题。
反复的发送消息到运行有漏洞客户端的主机将会耗尽它的资源。虽然可以用客户端忽略恶意重复信息的特性来减轻这个漏洞的影响,但它还存在攻击者伪造身份的漏洞。
基于FastTrack P2P技术的文件共享客户端如果有消息功能可能都会有这个漏洞。
KaZaA的1.5版本不受影响。
<*来源:mrjade 2k2 (mrjade@softhome.net)
*>
建议:
临时解决方法:
如果您不能立刻安装补丁或者升级,NSFOCUS建议您采取以下措施以降低威胁:
* 暂时没有好的临时解决方法。
厂商补丁:
Fast Track
----------
目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:
KaZaA 1.5不受影响,请升级到该版本:
KaZaA Upgrade KaZaA 1.5
http://www.kazaa.com/en/index.htm
浏览次数:3568
严重程度:0(网友投票)
绿盟科技给您安全的保障