发布日期：2000-11-01
更新日期：2000-11-01

受影响系统：

Inktomi Search Software 3.1.x
   - Sun Solaris 2.5
   - Microsoft Windows NT 4.0
   - Linux kernel 2.3
   - HP HP-UX 11.4

描述：

---

Inktomi 的Ultraseek Server是一个应用于内部网或者网站换将的搜索引擎。
它存在一个远程拒绝服务漏洞。如果用户提交一个恶意的URL给搜索引擎所监
听的端口（缺省是8765），将导致服务停止响应。必须重新启动服务才能恢
复正常功能。

<*来源：USSR Labs (labs@ussrback.com) *>




测试方法：

---

警 告

以下程序(方法)可能带有攻击性，仅供安全研究与教学之用。使用者风险自负！

USSR Labs (labs@ussrback.com)提供了测试代码,
http://ServerIP:8765/index.html?&col=&ht=0&qs=&qc=&pw=100%25&ws=0&
nh=10&lk=1 &rf=0&si=1&si=1&ql=../../../index


建议：

---

厂商补丁：

[ Sun Solaris ]

Inktomi Search 4.0 for the Sun Solaris platform is available at:

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-solaris-4.0.0.tar.Z
ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-solaris-4.0.0.tar.gz

Additional European language support for Solaris is available at:

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-solaris-4.0.0-language.tar.Z
ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-solaris-4.0.0-language.tar.gz

Additional Asian language support for Solaris is available at:

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-solaris-4.0.0-cjk.tar.Z
ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-solaris-4.0.0-cjk.tar.gz

Additional postscript support for Solaris is available at:

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-solaris-4.0.0-postscript.tar.Z
ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-solaris-4.0.0-postscript.tar.gz

z3950 support for Solaris is available at:

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-solaris-4.0.0-z3950.tar.Z
ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-solaris-4.0.0-z3950.tar.gz

40-bit SSL spidering support for Solaris is available at:

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-solaris-4.0.0-ssl-export.tar.Z
ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-solaris-4.0.0-ssl-export.tar.gz

128-bit SSL spidering support is also available.  


[ Microsoft Windows NT ]

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-winnt-4.0.0.exe

Additional European language support is available for Windows NT at:

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-winnt-4.0.0-language.exe

Additional Asian language support is available for Windows NT at:

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-winnt-4.0.0-cjk.exe

Additional postscript support is available for Windows NT at:

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-winnt-4.0.0-postscript.exe

40-bit SSL spidering support for Windows NT is available at:

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-winnt-4.0.0-ssl-export.exe

128-bit SSL spidering support is also available.  Contact your sales
representative for download information.


[ Linux ]

Inktomi Search 4.0 for the Linux platform is available at:

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-linux-4.0.0.i386.rpm
ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-linux-4.0.0.tar.gz

Additional European language support is available for Linux at:

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-linux-4.0.0-language.i386.rpm
ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-linux-4.0.0-language.tar.gz

Additional Asian language support is available for Linux at:

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-linux-4.0.0-cjk.i386.rpm
ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-linux-4.0.0-cjk.tar.gz

Additional z3950 support is available for Linux at:

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-linux-4.0.0-z3950.i386.rpm
ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-linux-4.0.0-z3950.tar.gz


[ HP-UX ]

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-hpux-4.0.0.tar.gz

Additional European language support is available for HP-UX at:

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-hpux-4.0.0-language.tar.gz

Additional Asian language support is available for HP-UX at:

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-hpux-4.0.0-cjk.tar.gz

Additional z3950 support is available for HP-UX at:

ftp://ftp.ultraseek.com/pub/InktomiSearch/4.0.0/InktomiSearch-hpux-4.0.0-z3950.tar.gz



浏览次数：9240
严重程度：0（网友投票）