安全研究
安全漏洞
Veritas Cluster Server远程root用户访问漏洞
发布日期:2004-10-14
更新日期:2004-10-19
受影响系统:
Veritas Cluster Server 4.0不受影响系统:
Veritas Cluster Server 3.5 MP2
Veritas Cluster Server 3.5 MP1
Veritas Cluster Server 3.5
Veritas Cluster Server 2.2 MP2
Veritas Cluster Server 2.2 MP1
Veritas Cluster Server 2.2
Veritas Cluster Server 2.1
Veritas Cluster Server 2.0
Veritas Cluster Server 1.3.1
Veritas Cluster Server 1.3
Veritas Cluster Server 4.0 MP1描述:
BUGTRAQ ID: 11421
CVE(CAN) ID: CVE-2004-2205
Veritas Cluster服务程序是一款存储控制解决方案。
运行在Unix/Linux系统上的Veritas Cluster服务程序存在一个未明问题,远程攻击者可以利用这个漏洞以root用户权限访问系统。
目前没有提供详细漏洞细节。其中Solaris、HP-UX、AIX和Linux系统受此漏洞影响,不过Veritas Cluster Server for Windows系统不受此漏洞影响。
<*来源:Veritas
链接:http://seer.support.veritas.com/docs/271040.htm
*>
建议:
厂商补丁:
Veritas
-------
目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:
Veritas Software Cluster Server 1.3 Solaris:
Veritas Software Patch vcs.130-patch03_239344.tar.Z
http://ftp.support.veritas.com/pub/support/products/
ClusterServer_UNIX/vcs.130-patch03_239344.tar.Z
Veritas Software Cluster Server 2.2 MP2:
Veritas Software Patch
vcs.2.2_MP2_i147547a.rhel_21_i686.tar_270095.gz
http://seer.support.veritas.com/docs/270095.htm
Veritas Software Patch
vcs.2.2_MP2_i147547a.rhel_30_i686.tar_270096.gz
http://seer.support.veritas.com/docs/270096.htm
Veritas Software Patch
vcs.2.2_MP2_i147547a.rhel_30_u2_ia64.tar_270097.gz
http://seer.support.veritas.com/docs/270097.htm
Veritas Software Patch
vcs.2.2_MP2_i147547a.sles8_sp3_i686.tar_270092.gz
http://seer.support.veritas.com/docs/270092.htm
Veritas Software Patch
vcs.2.2_MP2_i147547a.esx_210_i686.tar_271277.gz
http://seer.support.veritas.com/docs/271277.htm
Veritas Software Cluster Server 3.5 Solaris MP3:
Veritas Software Patch vcs.3.5P3+i147547a.sol_270071.tar.Z
http://seer.support.veritas.com/docs/270071.htm
Veritas Software Cluster Server 3.5 MP1:
Veritas Software Patch vcs.3.5P1+i147547b.aix_270090.tar.Z
http://seer.support.veritas.com/docs/270090.htm
Veritas Software Cluster Server 3.5 HP-UX Update 2:
Veritas Software Patch vcs.3.5P1+i147547b.hp_270074.tar.Z
http://seer.support.veritas.com/docs/270074.htm
浏览次数:3293
严重程度:0(网友投票)
绿盟科技给您安全的保障