发布日期：2003-06-20
更新日期：2003-06-27

受影响系统：

Sun Solaris 9.0_x86
Sun Solaris 9.0
Sun Solaris 8.0_x86
Sun Solaris 8.0
Sun Solaris 7.0_x86
Sun Solaris 7.0
Sun Solaris 2.6_x86
Sun Solaris 2.6

描述：

---

BUGTRAQ  ID: 7991
CVE(CAN) ID: CVE-2003-1067

Solaris是一款由Sun Microsystems公司开发和维护的商业性质UNIX操作系统。

Sun的dbm_open()、ndbm()、dbm()和dbminit()库函数缺少正确的缓冲区边界检查，攻击者可以利用这些漏洞进行缓冲区溢出攻击，可以root权限在系统上执行任意指令。

这些数据库函数在拷贝外部数据到内部内存缓冲区时存在问题，提供过多的数据可导致破坏内存敏感信息。Solaris Xsun应用程序就链接有此漏洞的库，精心利用此漏洞可能以root权限在系统上执行任意指令。

<*链接：http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F55420
*>

建议：

---

厂商补丁：

Sun
---
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

SPARC Platform

Solaris 2.6：

patche 105210-47

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105210&rev=47

patche 105377-06

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105377&rev=06

patche 105401-43  

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105401&rev=43

Solaris 7:

patche 106541-22

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106541&rev=22

patche 106942-26

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106541&rev=22

patche 106949-03

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106949&rev=03

Solaris 8

Patch 108827-24

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108827&rev=24

Patch 108993-16

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108993&rev=16

Patch 109152-02

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=109152&rev=02

Solari 9

Patch 112874-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112874&rev=01

Patch 112922-02

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112922&rev=02

Patch 112922-02

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=112922&rev=02

Patch 113319-10

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=113319&rev=10

Patch 114569-02

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114569&rev=02

Patch 114571-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114571&rev=01

x86 Platform

Solaris 2.6

patche 105211-49

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105211&rev=49

patche 105402-43

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=105402&rev=43

Solaris 7

patche 106542-22

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106542&rev=22

patche 106943-26

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=106943&rev=26

patche 108828-25

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108828&rev=25

patche 108994-16

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=108994&rev=16

patche 114617-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114617&rev=01

Solaris 9

patche 113719-03

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=113719&rev=03

patche 114570-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114570&rev=01

patche 114715-01

http://sunsolve.sun.com/pub-cgi/findPatch.pl?patchId=114715&rev=01

浏览次数：3607
严重程度：0（网友投票）