发布日期：2003-11-11
更新日期：2003-11-18

受影响系统：

omega-rpg omega-rpg 0.90-pa9
    - Debian Linux 3.0

描述：

---

BUGTRAQ  ID: 9016
CVE(CAN) ID: CVE-2003-0932

omega-rpg是一款LINUX下的游戏程序。

omega-rpg没有正确处理环境变量参数，本地攻击者可以利用这个漏洞进行缓冲区溢出攻击。

攻击者提供包含超长环境变量，并执行omega-rpg，可触发缓冲区溢出，精心构建环境变量参数，可能以game组权限在系统上执行任意指令。

<*来源：Debian Security Advisory
  
  链接：http://www.debian.org/security/2003/dsa-400
*>

建议：

---

厂商补丁：

Debian
------
Debian已经为此发布了一个安全公告（DSA-400-1）以及相应补丁:
DSA-400-1：New omega-rpg packages fix local games exploit
链接：http://www.debian.org/security/2003/dsa-400

补丁下载：

Source archives:

http://security.debian.org/pool/updates/main/o/omega-rpg/omega-rpg_0.90-pa9-7woody1.dsc
Size/MD5 checksum:      616 ec09d79e6db8d2a26b2419118c82b6d9
http://security.debian.org/pool/updates/main/o/omega-rpg/omega-rpg_0.90-pa9-7woody1.diff.gz
Size/MD5 checksum:     9264 9a1c91a88685a9a3ebbd3d303d9af458
http://security.debian.org/pool/updates/main/o/omega-rpg/omega-rpg_0.90-pa9.orig.tar.gz
Size/MD5 checksum:   425670 decf9c9c5e217a243d87c5693069016f

Alpha architecture:

http://security.debian.org/pool/updates/main/o/omega-rpg/omega-rpg_0.90-pa9-7woody1_alpha.deb
Size/MD5 checksum:   433086 e0b2fab139c48fd165856261346509ea

ARM architecture:

http://security.debian.org/pool/updates/main/o/omega-rpg/omega-rpg_0.90-pa9-7woody1_arm.deb
Size/MD5 checksum:   329224 8821937e31ffdeb13ca7707be44f2ee2

Intel IA-32 architecture:

http://security.debian.org/pool/updates/main/o/omega-rpg/omega-rpg_0.90-pa9-7woody1_i386.deb
Size/MD5 checksum:   313176 5f6e8d376c2dcf9eec749a6589410090

Intel IA-64 architecture:

http://security.debian.org/pool/updates/main/o/omega-rpg/omega-rpg_0.90-pa9-7woody1_ia64.deb
Size/MD5 checksum:   499828 aa1d2895cf9bf64ee15e4632286f819c

HP Precision architecture:

http://security.debian.org/pool/updates/main/o/omega-rpg/omega-rpg_0.90-pa9-7woody1_hppa.deb
Size/MD5 checksum:   367390 bf3008b562d94d34af03cbcecc90e99f

Motorola 680x0 architecture:

http://security.debian.org/pool/updates/main/o/omega-rpg/omega-rpg_0.90-pa9-7woody1_m68k.deb
Size/MD5 checksum:   295016 70d31cc87a332a44155ef356ad8e41b5

Big endian MIPS architecture:

http://security.debian.org/pool/updates/main/o/omega-rpg/omega-rpg_0.90-pa9-7woody1_mips.deb
Size/MD5 checksum:   373454 39d6c1c8570fe8aae62a9c7e1c970c6a

Little endian MIPS architecture:

http://security.debian.org/pool/updates/main/o/omega-rpg/omega-rpg_0.90-pa9-7woody1_mipsel.deb
Size/MD5 checksum:   372138 c21602808847f8edf799d7ee4e562899

PowerPC architecture:

http://security.debian.org/pool/updates/main/o/omega-rpg/omega-rpg_0.90-pa9-7woody1_powerpc.deb
Size/MD5 checksum:   355306 3b6e082c0568bc3e090b017d1366bf97

IBM S/390 architecture:

http://security.debian.org/pool/updates/main/o/omega-rpg/omega-rpg_0.90-pa9-7woody1_s390.deb
Size/MD5 checksum:   330438 90c057f921d7861f3a511b684d22a630

Sun Sparc architecture:

http://security.debian.org/pool/updates/main/o/omega-rpg/omega-rpg_0.90-pa9-7woody1_sparc.deb
Size/MD5 checksum:   347386 40762ef4e8f790f1260c7c84bfd24809





补丁安装方法：

1. 手工安装补丁包：

  首先，使用下面的命令来下载补丁软件：
  # wget url  (url是补丁下载链接地址)

  然后，使用下面的命令来安装补丁：  
  # dpkg -i file.deb (file是相应的补丁名)

2. 使用apt-get自动安装补丁包：

   首先，使用下面的命令更新内部数据库：
   # apt-get update
  
   然后，使用下面的命令安装更新软件包：
   # apt-get upgrade

浏览次数：2781
严重程度：0（网友投票）