发布日期：2004-12-07
更新日期：2004-12-08

受影响系统：

nfs statd server
    - Mandrake Linux 9.0
    - Mandrake Linux 8.2
    - Mandrake Linux 8.1
    - Mandrake Linux 8.0

描述：

---

BUGTRAQ  ID: 11785
CVE(CAN) ID: CVE-2004-1014

rpc.statd是一种用于监视并控制NFS的RPC守护进程，广泛运行于种Unix/Linux类操作系统上，程序使用NSM（Network Status Monitor）协议。

rpc.statd不正确处理SIGPIPE信号，远程攻击者可以利用这个漏洞关闭进程，进行拒绝服务攻击

多家厂商报告NFS statd服务中存在一个问题，rpc.statd进程没有忽略SIGPIPE信号，结果可导致远程进程可中断TCP连接触发信号并使进程关闭。

<*来源：SGI developers
  
  链接：http://www.securitytracker.com/alerts/2004/Dec/1012436.html
        http://www.linux-mandrake.com/en/security/2004/2004-146.php
*>

建议：

---

厂商补丁：

MandrakeSoft
------------
MandrakeSoft已经为此发布了一个安全公告（MDKSA-2004:146）以及相应补丁:
MDKSA-2004:146：Updated nfs-utils packages fix remote DoS vulnerability
链接：http://www.linux-mandrake.com/en/security/2004/2004-146.php

补丁下载：

Updated Packages:

Mandrakelinux 10.0:
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/nfs-utils-1.0.6-2.1.100mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/RPMS/nfs-utils-clients-1.0.6-2.1.100mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.0/SRPMS/nfs-utils-1.0.6-2.1.100mdk.src.rpm

Mandrakelinux 10.0/AMD64:
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/RPMS/nfs-utils-1.0.6-2.1.100mdk.amd64.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/RPMS/nfs-utils-clients-1.0.6-2.1.100mdk.amd64.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/10.0/SRPMS/nfs-utils-1.0.6-2.1.100mdk.src.rpm

Mandrakelinux 10.1:
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.1/RPMS/nfs-utils-1.0.6-2.1.101mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.1/RPMS/nfs-utils-clients-1.0.6-2.1.101mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/10.1/SRPMS/nfs-utils-1.0.6-2.1.101mdk.src.rpm

Mandrakelinux 10.1/X86_64:
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/x86_64/10.1/RPMS/nfs-utils-1.0.6-2.1.101mdk.x86_64.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/x86_64/10.1/RPMS/nfs-utils-clients-1.0.6-2.1.101mdk.x86_64.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/x86_64/10.1/SRPMS/nfs-utils-1.0.6-2.1.101mdk.src.rpm

Corporate Server 2.1:
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/corporate/2.1/RPMS/nfs-utils-1.0.1-1.2.C21mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/corporate/2.1/RPMS/nfs-utils-clients-1.0.1-1.2.C21mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/corporate/2.1/SRPMS/nfs-utils-1.0.1-1.2.C21mdk.src.rpm

Corporate Server 2.1/x86_64:
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/x86_64/corporate/2.1/RPMS/nfs-utils-1.0.1-1.2.C21mdk.x86_64.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/x86_64/corporate/2.1/RPMS/nfs-utils-clients-1.0.1-1.2.C21mdk.x86_64.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/x86_64/corporate/2.1/SRPMS/nfs-utils-1.0.1-1.2.C21mdk.src.rpm

Mandrakelinux 9.2:
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/9.2/RPMS/nfs-utils-1.0.5-1.1.92mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/9.2/RPMS/nfs-utils-clients-1.0.5-1.1.92mdk.i586.rpm
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/9.2/SRPMS/nfs-utils-1.0.5-1.1.92mdk.src.rpm

Mandrakelinux 9.2/AMD64:
ftp://download.sourceforge.net/pub/mirrors/mandrake/updates/amd64/9.2/RPMS/nfs-utils-1.0.5-1.1.92mdk.amd64.rpm

上述升级软件还可以在下列地址中的任意一个镜像ftp服务器上下载：
http://www.mandrakesecure.net/en/ftp.php

浏览次数：3760
严重程度：0（网友投票）