发布日期：2004-04-26
更新日期：2004-05-10

受影响系统：

Linux kernel 2.6.5
Linux kernel 2.6.4
Linux kernel 2.6.3
Linux kernel 2.6.2
Linux kernel 2.6.1-rc2
Linux kernel 2.6.1-rc1
Linux kernel 2.6.1
Linux kernel 2.6-test9-CVS
Linux kernel 2.6-test9
Linux kernel 2.6-test8
Linux kernel 2.6-test7
Linux kernel 2.6-test6
Linux kernel 2.6-test5
Linux kernel 2.6-test4
Linux kernel 2.6-test3
Linux kernel 2.6-test2
Linux kernel 2.6-test11
Linux kernel 2.6-test10
Linux kernel 2.6-test1
Linux kernel 2.6
Linux kernel 2.4.9
Linux kernel 2.4.8
Linux kernel 2.4.7
Linux kernel 2.4.6
Linux kernel 2.4.5
Linux kernel 2.4.4
Linux kernel 2.4.3
Linux kernel 2.4.26
Linux kernel 2.4.25
Linux kernel 2.4.24
Linux kernel 2.4.23
Linux kernel 2.4.22
Linux kernel 2.4.21 pre7
Linux kernel 2.4.21 pre4
Linux kernel 2.4.21 pre1
Linux kernel 2.4.21
Linux kernel 2.4.20
Linux kernel 2.4.2
Linux kernel 2.4.19pre-6
Linux kernel 2.4.19pre-5
Linux kernel 2.4.19pre-4
Linux kernel 2.4.19pre-3
Linux kernel 2.4.19pre-2
Linux kernel 2.4.19pre-1
Linux kernel 2.4.19
Linux kernel 2.4.18pre-8
Linux kernel 2.4.18pre-7
Linux kernel 2.4.18pre-6
Linux kernel 2.4.18pre-5
Linux kernel 2.4.18pre-4
Linux kernel 2.4.18pre-3
Linux kernel 2.4.18pre-2
Linux kernel 2.4.18pre-1
Linux kernel 2.4.17
Linux kernel 2.4.16
Linux kernel 2.4.15
Linux kernel 2.4.14
Linux kernel 2.4.13
Linux kernel 2.4.12
Linux kernel 2.4.11
Linux kernel 2.4.10
Linux kernel 2.4.1
Linux kernel 2.4.0-test1
Linux kernel 2.4
Linux kernel 2.4.18
    - Conectiva Linux 8.0
    - Debian Linux 3.0
    - Mandrake Linux 8.2
    - Mandrake Linux 8.1
    - Mandrake Linux 8.0
    - RedHat Linux 8.0
    - RedHat Linux 7.3
    - SuSE Linux 8.2
    - SuSE Linux 8.1
    - SuSE Linux 8.0
    - SuSE Linux 7.3
    - SuSE Linux 7.2
    - SuSE Linux 7.1
    - Turbo Linux 7.0

描述：

---

BUGTRAQ  ID: 10221
CVE(CAN) ID: CVE-2004-0427

Linux是一款开放源代码操作系统。

Linux包含的do_fork()函数包含一个错误路径，本地攻击者可以利用这个漏洞获得部分内存敏感信息。

目前没有详细漏洞细节提供。

<*来源：RedHat advisory
  
  链接：http://www.linux-mandrake.com/en/security/2004/2004-037.php
        *>

建议：

---

厂商补丁：

MandrakeSoft
------------
MandrakeSoft已经为此发布了一个安全公告（MDKSA-2004:037）以及相应补丁:
MDKSA-2004:037：Updated kernel packages fix multiple vulnerabilities
链接：http://www.linux-mandrake.com/en/security/2004/2004-037.php

补丁下载：

Updated Packages:

Mandrakelinux 10.0:
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/kernel-2.4.25.4mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/kernel-2.6.3.9mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/kernel-enterprise-2.4.25.4mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/kernel-enterprise-2.6.3.9mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/kernel-i686-up-4GB-2.4.25.4mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/kernel-i686-up-4GB-2.6.3.9mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/kernel-p3-smp-64GB-2.4.25.4mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/kernel-p3-smp-64GB-2.6.3.9mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/kernel-secure-2.6.3.9mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/kernel-smp-2.4.25.4mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/kernel-smp-2.6.3.9mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/kernel-source-2.4.25-4mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/kernel-source-2.6.3-9mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/kernel-source-stripped-2.6.3-9mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/SRPMS/kernel-2.4.25.4mdk-1-1mdk.src.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/SRPMS/kernel-2.6.3.9mdk-1-1mdk.src.rpm

Corporate Server 2.1:
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/corporate/2.1/RPMS/kernel-2.4.19.40mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/corporate/2.1/RPMS/kernel-enterprise-2.4.19.40mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/corporate/2.1/RPMS/kernel-secure-2.4.19.40mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/corporate/2.1/RPMS/kernel-smp-2.4.19.40mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/corporate/2.1/RPMS/kernel-source-2.4.19-40mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/corporate/2.1/SRPMS/kernel-2.4.19.40mdk-1-1mdk.src.rpm

Corporate Server 2.1/x86_64:
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/x86_64/corporate/2.1/RPMS/kernel-2.4.19.41mdk-1-1mdk.x86_64.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/x86_64/corporate/2.1/RPMS/kernel-secure-2.4.19.41mdk-1-1mdk.x86_64.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/x86_64/corporate/2.1/RPMS/kernel-smp-2.4.19.41mdk-1-1mdk.x86_64.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/x86_64/corporate/2.1/RPMS/kernel-source-2.4.19-41mdk.x86_64.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/x86_64/corporate/2.1/SRPMS/kernel-2.4.19.40mdk-1-1mdk.src.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/x86_64/corporate/2.1/SRPMS/kernel-2.4.19.41mdk-1-1mdk.src.rpm

Mandrakelinux 9.1:
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/9.1/RPMS/kernel-2.4.21.0.30mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/9.1/RPMS/kernel-enterprise-2.4.21.0.30mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/9.1/RPMS/kernel-secure-2.4.21.0.30mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/9.1/RPMS/kernel-smp-2.4.21.0.30mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/9.1/RPMS/kernel-source-2.4.21-0.30mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/9.1/SRPMS/kernel-2.4.21.0.30mdk-1-1mdk.src.rpm

Mandrakelinux 9.1/PPC:
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/ppc/9.1/RPMS/kernel-2.4.21.0.30mdk-1-1mdk.ppc.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/ppc/9.1/RPMS/kernel-enterprise-2.4.21.0.30mdk-1-1mdk.ppc.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/ppc/9.1/RPMS/kernel-smp-2.4.21.0.30mdk-1-1mdk.ppc.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/ppc/9.1/RPMS/kernel-source-2.4.21-0.30mdk.ppc.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/ppc/9.1/SRPMS/kernel-2.4.21.0.30mdk-1-1mdk.src.rpm

Mandrakelinux 9.2:
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/9.2/RPMS/kernel-2.4.22.30mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/9.2/RPMS/kernel-enterprise-2.4.22.30mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/9.2/RPMS/kernel-i686-up-4GB-2.4.22.30mdk-1-1mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/9.2/RPMS/kernel-p3-smp-64GB-2.4.22.30mdk-1-1mdk.i586.rpm

上述升级软件还可以在下列地址中的任意一个镜像ftp服务器上下载：
http://www.mandrakesecure.net/en/ftp.php

RedHat
------
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

Linux kernel 2.4.22:

Fedora Upgrade kernel-source-2.4.22-1.2188.nptl.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386/kernel-source-2.4.22-1.2188.nptl.i386.rpm

Fedora Upgrade kernel-doc-2.4.22-1.2188.nptl.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386/kernel-doc-2.4.22-1.2188.nptl.i386.rpm

Fedora Upgrade kernel-BOOT-2.4.22-1.2188.nptl.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386/kernel-BOOT-2.4.22-1.2188.nptl.i386.rpm

Fedora Upgrade kernel-debuginfo-2.4.22-1.2188.nptl.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386/debug/kernel-debuginfo-2.4.22-1.2188.nptl.i386.rpm

Fedora Upgrade kernel-debuginfo-2.4.22-1.2188.nptl.i586.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386/debug/kernel-debuginfo-2.4.22-1.2188.nptl.i586.rpm

Fedora Upgrade kernel-debuginfo-2.4.22-1.2188.nptl.i686.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386/debug/kernel-debuginfo-2.4.22-1.2188.nptl.i686.rpm

Fedora Upgrade kernel-debuginfo-2.4.22-1.2188.nptl.athlon.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386/debug/kernel-debuginfo-2.4.22-1.2188.nptl.athlon.rpm

Fedora Upgrade kernel-2.4.22-1.2188.nptl.i586.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386/kernel-2.4.22-1.2188.nptl.i586.rpm

Fedora Upgrade kernel-2.4.22-1.2188.nptl.i686.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386/kernel-2.4.22-1.2188.nptl.i686.rpm

Fedora Upgrade kernel-smp-2.4.22-1.2188.nptl.i686.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386/kernel-smp-2.4.22-1.2188.nptl.i686.rpm

Fedora Upgrade kernel-2.4.22-1.2188.nptl.athlon.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386/kernel-2.4.22-1.2188.nptl.athlon.rpm

Fedora Upgrade kernel-smp-2.4.22-1.2188.nptl.athlon.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/i386/kernel-smp-2.4.22-1.2188.nptl.athlon.rpm

Fedora Upgrade kernel-2.4.22-1.2188.nptl.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/x86_64/kernel-2.4.22-1.2188.nptl.x86_64.rpm

Fedora Upgrade kernel-source-2.4.22-1.2188.nptl.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/x86_64/kernel-source-2.4.22-1.2188.nptl.x86_64.rpm

Fedora Upgrade kernel-doc-2.4.22-1.2188.nptl.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/x86_64/kernel-doc-2.4.22-1.2188.nptl.x86_64.rpm

Fedora Upgrade kernel-smp-2.4.22-1.2188.nptl.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/x86_64/kernel-smp-2.4.22-1.2188.nptl.x86_64.rpm

Fedora Upgrade kernel-debuginfo-2.4.22-1.2188.nptl.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/x86_64/debug/kernel-debuginfo-2.4.22-1.2188.nptl.x86_64.rpm

S.u.S.E.
--------
S.u.S.E.已经为此发布了一个安全公告（SuSE-SA:2004:010）以及相应补丁:
SuSE-SA:2004:010：kernel
链接：

补丁下载：

Linux kernel 2.4.18:

SuSE Upgrade k_deflt-2.4.18-293.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.0/images/k_deflt-2.4.18-293.i386.rpm

SuSE Upgrade k_smp-2.4.18-293.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.0/images/k_smp-2.4.18-293.i386.rpm

SuSE Upgrade k_psmp-2.4.18-293.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.0/images/k_psmp-2.4.18-293.i386.rpm

SuSE Upgrade k_i386-2.4.18-293.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.0/images/k_i386-2.4.18-293.i386.rpm

Linux kernel 2.4.20:

SuSE Upgrade k_deflt-2.4.20-111.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/k_deflt-2.4.20-111.i586.rpm

SuSE Upgrade k_athlon-2.4.20-111.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/k_athlon-2.4.20-111.i586.rpm

SuSE Upgrade k_smp-2.4.20-111.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/k_smp-2.4.20-111.i586.rpm

SuSE Upgrade k_psmp-2.4.20-111.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/k_psmp-2.4.20-111.i586.rpm

Linux kernel 2.4.21:

SuSE Upgrade k_deflt-2.4.21-215.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/k_deflt-2.4.21-215.i586.rpm

SuSE Upgrade k_athlon-2.4.21-215.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/k_athlon-2.4.21-215.i586.rpm

SuSE Upgrade k_smp-2.4.21-215.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/k_smp-2.4.21-215.i586.rpm

SuSE Upgrade k_psmp-2.4.21-215.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/k_psmp-2.4.21-215.i586.rpm

SuSE Upgrade k_deflt-2.4.21-215.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/k_deflt-2.4.21-215.x86_64.rpm

SuSE Upgrade k_smp-2.4.21-215.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/k_smp-2.4.21-215.x86_64.rpm

Linux kernel 2.6.4:

SuSE Upgrade kernel-default-2.6.4-54.3.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-default-2.6.4-54.3.i586.rpm

SuSE Upgrade kernel-smp-2.6.4-54.3.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-smp-2.6.4-54.3.i586.rpm

SuSE Upgrade kernel-bigsmp-2.6.4-54.3.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-bigsmp-2.6.4-54.3.i586.rpm

SuSE Upgrade kernel-syms-2.6.4-54.3.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-syms-2.6.4-54.3.i586.rpm

SuSE Upgrade kernel-default-2.6.4-54.3.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-default-2.6.4-54.3.i586.patch.rpm

SuSE Upgrade kernel-smp-2.6.4-54.3.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-smp-2.6.4-54.3.i586.patch.rpm

SuSE Upgrade kernel-bigsmp-2.6.4-54.3.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-bigsmp-2.6.4-54.3.i586.patch.rpm

SuSE Upgrade kernel-syms-2.6.4-54.3.i586.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-syms-2.6.4-54.3.i586.patch.rpm

SuSE Upgrade kernel-default-2.6.4-54.3.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-default-2.6.4-54.3.x86_64.rpm

SuSE Upgrade kernel-smp-2.6.4-54.3.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-smp-2.6.4-54.3.x86_64.rpm

SuSE Upgrade kernel-syms-2.6.4-54.3.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-syms-2.6.4-54.3.x86_64.rpm

SuSE Upgrade kernel-default-2.6.4-54.3.x86_64.patch.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-default-2.6.4-54.3.x86_64.patch.rpm

SuSE Upgrade kernel-smp-2.6.4-54.3.x86_64.patch.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-smp-2.6.4-54.3.x86_64.patch.rpm

浏览次数：3950
严重程度：0（网友投票）