发布日期：2006-05-11
更新日期：2006-05-12

受影响系统：

EMC Dantz Retrospect Client for Windows
EMC Dantz Retrospect Client for Solaris
EMC Dantz Retrospect Client for NetWare
EMC Dantz Retrospect Client for Macintosh
EMC Dantz Retrospect Client for Linux

不受影响系统：

EMC Dantz Retrospect Client for Windows 7.5
EMC Dantz Retrospect Client for Windows 7.0
EMC Dantz Retrospect Client for Windows 6.5
EMC Dantz Retrospect Client for Solaris 7.5
EMC Dantz Retrospect Client for Solaris 7.0
EMC Dantz Retrospect Client for Solaris 6.5
EMC Dantz Retrospect Client for NetWare 1.0
EMC Dantz Retrospect Client for Macintosh 6.1
EMC Dantz Retrospect Client for Macintosh 5.1
EMC Dantz Retrospect Client for Linux 7.5
EMC Dantz Retrospect Client for Linux 7.0
EMC Dantz Retrospect Client for Linux 6.5

描述：

---

BUGTRAQ  ID: 17948

EMC Dantz Retrospect是为中小企业设计的备份和灾难恢复系统。

Retrospect客户端软件存在远程缓冲区溢出漏洞，攻击者可以通过向497端口发送畸形报文导致执行任意指令。

此漏洞仅影响Retrospect客户端。

<*来源：Nicolas Pouvesle
        Stanka &#352;alamun
  
  链接：http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=9511&r=0.8686334
*>

建议：

---

厂商补丁：

EMC
---
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

Retrospect Client for Windows 7.5:

http://download.dantz.com/archives/Retro-EN_7_5_116.exe

Retrospect Client for Windows 7.0:

http://download.dantz.com/archives/RetroClient-EN_7_0_112.exe

Retrospect Client for Windows 6.5:

http://download.dantz.com/archives/RetroClient-EN_6_5_140.exe

Retrospect Client for Macintosh 6.1:

http://download.dantz.com/archives/Client_OS_X-6_1_130.dmg

Retrospect Client for Macintosh 5.1:

http://download.dantz.com/archives/Classic-Client-EN_5_1_180.sit

Retrospect Client for Linux 7.5:

(rpm) - http://download.dantz.com/archives/retroclient-75_linux.rpm

(tar) - http://download.dantz.com/archives/retroclient-75_linux.tar

Retrospect Client for Linux 7.0:

(rpm) - http://download.dantz.com/archives/retroclient-70_linux.rpm

(tar) - http://download.dantz.com/archives/retroclient-70_linux.tar

Retrospect Client for Linux 6.5:

(rpm) - http://download.dantz.com/archives/retroclient-65_linux.rpm

(tar) -  http://download.dantz.com/archives/retroclient-65_linux.tar

Retrospect Client for Solaris 7.5:

(pkg) - http://download.dantz.com/archives/retroclient-75_solaris.pkg

(tar) - http://download.dantz.com/archives/retroclient-75_solaris.tar

Retrospect Client for Solaris 7.0:

(pkg) - http://download.dantz.com/archives/retroclient-70_solaris.pkg

(tar) - http://download.dantz.com/archives/retroclient-70_solaris.tar

Retrospect Client for Solaris 6.5:

(pkg) - http://download.dantz.com/archives/retroclient-65_solaris.pkg

(tar) - http://download.dantz.com/archives/retroclient-65_solaris.tar

Retrospect Client for NetWare 1.0:

http://download.dantz.com/archives/Novell-70.zip

浏览次数：3295
严重程度：0（网友投票）