发布日期：2004-10-14
更新日期：2004-10-19

受影响系统：

Veritas Cluster Server 4.0
Veritas Cluster Server 3.5 MP2
Veritas Cluster Server 3.5 MP1
Veritas Cluster Server 3.5
Veritas Cluster Server 2.2 MP2
Veritas Cluster Server 2.2 MP1
Veritas Cluster Server 2.2
Veritas Cluster Server 2.1
Veritas Cluster Server 2.0
Veritas Cluster Server 1.3.1
Veritas Cluster Server 1.3

不受影响系统：

Veritas Cluster Server 4.0 MP1

描述：

---

BUGTRAQ  ID: 11421
CVE(CAN) ID: CVE-2004-2205

Veritas Cluster服务程序是一款存储控制解决方案。

运行在Unix/Linux系统上的Veritas Cluster服务程序存在一个未明问题，远程攻击者可以利用这个漏洞以root用户权限访问系统。

目前没有提供详细漏洞细节。其中Solaris、HP-UX、AIX和Linux系统受此漏洞影响，不过Veritas Cluster Server for Windows系统不受此漏洞影响。

<*来源：Veritas
  
  链接：http://seer.support.veritas.com/docs/271040.htm
*>

建议：

---

厂商补丁：

Veritas
-------
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

Veritas Software Cluster Server 1.3 Solaris:
      Veritas Software Patch vcs.130-patch03_239344.tar.Z
      http://ftp.support.veritas.com/pub/support/products/
      ClusterServer_UNIX/vcs.130-patch03_239344.tar.Z
Veritas Software Cluster Server 2.2 MP2:
      Veritas Software Patch
      vcs.2.2_MP2_i147547a.rhel_21_i686.tar_270095.gz
      http://seer.support.veritas.com/docs/270095.htm
      Veritas Software Patch
      vcs.2.2_MP2_i147547a.rhel_30_i686.tar_270096.gz
      http://seer.support.veritas.com/docs/270096.htm
      Veritas Software Patch
      vcs.2.2_MP2_i147547a.rhel_30_u2_ia64.tar_270097.gz
      http://seer.support.veritas.com/docs/270097.htm
      Veritas Software Patch
      vcs.2.2_MP2_i147547a.sles8_sp3_i686.tar_270092.gz
      http://seer.support.veritas.com/docs/270092.htm
      Veritas Software Patch
      vcs.2.2_MP2_i147547a.esx_210_i686.tar_271277.gz
      http://seer.support.veritas.com/docs/271277.htm
Veritas Software Cluster Server 3.5 Solaris MP3:
      Veritas Software Patch vcs.3.5P3+i147547a.sol_270071.tar.Z
      http://seer.support.veritas.com/docs/270071.htm
Veritas Software Cluster Server 3.5 MP1:
      Veritas Software Patch vcs.3.5P1+i147547b.aix_270090.tar.Z
      http://seer.support.veritas.com/docs/270090.htm
Veritas Software Cluster Server 3.5 HP-UX Update 2:
      Veritas Software Patch vcs.3.5P1+i147547b.hp_270074.tar.Z
      http://seer.support.veritas.com/docs/270074.htm

浏览次数：3293
严重程度：0（网友投票）