首页 -> 安全研究
安全研究
安全漏洞
Real Networks Helix Server/Gateway管理服务HTTP POST拒绝服务攻击漏洞
发布日期:2004-01-14
更新日期:2004-01-25
受影响系统:
Real Networks Helix Universal Server 9.01描述:
Real Networks Helix Universal Server 9.0.2.881
Real Networks Helix Universal Server 9.0.2.802
Real Networks Helix Universal Server 9.0
Real Networks Helix Mobile Server 10
BUGTRAQ ID: 9421
CVE(CAN) ID: CVE-2004-0049
Helix Universal Server是一款由RealNetWorks开发和维护的多类型媒体服务器。
Helix Universal Server/Gateway 9不正确处理部分发送给服务器管理系统端口的HTTP POST消息,远程攻击者可以利用这个漏洞对服务进行拒绝服务攻击。
其中Helix Mobile Server 10也存在同样问题,目前没有详细漏洞细节提供。
攻击者要利用这个漏洞必须能够通过管理界面认证。
<*来源:Matt Moore (matt@westpoint.ltd.uk)
链接:http://www.service.real.com/help/faq/security/040112_dos/
*>
建议:
厂商补丁:
Real Networks
-------------
目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:
Helix Universal Server & Gateway 9
Compaq
http://forms.real.com/rnforms/products/servers/download/download.final.html?platform=Compaq+Tru64+5.1+%26+5.1A&product=Helix+Universal+Server&program=basic&version=Helix+Universal+Server
FreeBSD
http://forms.real.com/rnforms/products/servers/download/download.final.html?platform=FreeBSD+4.0+%26+4.5&product=Helix+Universal+Server&program=basic&version=Helix+Universal+Server
HP UX
http://forms.real.com/rnforms/products/servers/download/download.final.html?platform=HP+UX+11.0+%26+11.i&product=Helix+Universal+Server&program=basic&version=Helix+Universal+Server
IBM AIX
http://forms.real.com/rnforms/products/servers/download/download.final.html?platform=IBM+AIX+4.3+%26+5L&product=Helix+Universal+Server&program=basic&version=Helix+Universal+Server
Linux
http://forms.real.com/rnforms/products/servers/download/download.final.html?platform=Linux+version+2.4.18&product=Helix+Universal+Server&program=basic&version=Helix+Universal+Server
Sun Solaris 2.7
http://forms.real.com/rnforms/products/servers/download/download.final.html?platform=Sun+Solaris+2.7&product=Helix+Universal+Server&program=basic&version=Helix+Universal+Server
Sun Solaris 2.8
http://forms.real.com/rnforms/products/servers/download/download.final.html?platform=Sun+Solaris+2.8&product=Helix+Universal+Server&program=basic&version=Helix+Universal+Server
Windows
http://forms.real.com/rnforms/products/servers/download/download.final.html?platform=Windows+NT+4.0+%26+2000&product=Helix+Universal+Server&program=basic&version=Helix+Universal+Server
Helix Universal Mobile & Gateway 10:
通过在/Plugins目录中用如下文件代替即可:
Solaris 2.8
http://docs.real.com/docs/022604_pluginupdate/solaris/adminfs.so_sunos-58.gz
Linux
http://docs.real.com/docs/022604_pluginupdate/linux/adminfs.so_linux.gz
浏览次数:3219
严重程度:0(网友投票)
绿盟科技给您安全的保障