我要加入登录

声振论坛返回首页

FtpAdmin的个人空间 http://home.vibunion.com/?651 [收藏] [复制] [分享] [RSS]

日志

SUSE Linux 的sane存在远程DoS缺陷 (Linux,缺陷)

已有 383 次阅读2007-2-28 17:24 |个人分类:Linux系统

涉及程序：

SuSE Linux 7.3, 8.0, 8.1

描述：

SUSE Linux 的sane存在远程DoS缺陷

详细：

sane 包（扫描仪驱动程序接口）是一款linux下用于扫描的软件，能进行本地扫描和远程扫描。sane里存在几个漏洞能导致拒绝服务攻击，远程攻击者甚至可以利用sane.conf文件中包含的不允许访问sane服务器用户IP也能执行该缺陷。sane的缺省配置是仅仅响应本地请求。用户可以通过 tcpwrapper在xinetd或inetd里进行配置临时限制远程访问。

攻击方法：

暂无有效攻击代码

解决方案：

Intel i386 平台:

SuSE-8.1:
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/sane-1.0.8-143.i586.rpm
5b728bc3ac724be64aa736dbebe2aa23

patch rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/sane-1.0.8-143.i586.patch.rpm
77ab2574c35513136076c4b2a77e9cbf

source rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/src/sane-1.0.8-143.src.rpm
6ddec5bdadb07f985a08e592cd4c68b3

SuSE-8.0:
ftp://ftp.suse.com/pub/suse/i386/update/8.0/gra2/sane-1.0.7-217.i386.rpm
9438d81c7bd8b41dee948696f138c771

patch rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/8.0/gra2/sane-1.0.7-217.i386.patch.rpm
f461a294ab7d3638bf4b3e83f3910143

source rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/8.0/zq1/sane-1.0.7-217.src.rpm
ea888fa0c4e6aaf41e23caaf4f68a1d2

SuSE-7.3:
ftp://ftp.suse.com/pub/suse/i386/update/7.3/gra1/sane-1.0.5-295.i386.rpm
53d25817ed9c53cf6078d3794862a13e

source rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/7.3/zq1/sane-1.0.5-295.src.rpm<</a>
593a886a54482c841baa0fe9d43690c6

Sparc 平台:
SuSE-7.3:
ftp://ftp.suse.com/pub/suse/sparc/update/7.3/gra1/sane-1.0.5-114.sparc.rpm
bdb7ce58c8d363a03dadc719c2421d84

source rpm(s):
ftp://ftp.suse.com/pub/suse/sparc/update/7.3/zq1/sane-1.0.5-114.src.rpm
4d0f4994f1fc730edfcefa2d33fe456d

Power PC 平台:
SuSE-7.3:
ftp://ftp.suse.com/pub/suse/ppc/update/7.3/gra1/sane-1.0.5-179.ppc.rpm
83643306b81f0e89d4a5c96001a65ea5

source rpm(s):
ftp://ftp.suse.com/pub/suse/ppc/update/7.3/zq1/sane-1.0.5-179.src.rpm
fa277cfb3ec68aedb24de2ff2d13673f

收藏分享邀请举报

全部作者的其他最新日志

评论 (0 个评论)

FtpAdmin

|小黑屋|Archiver|手机版|联系我们|声振论坛

GMT+8, 2024-5-19 19:21 , Processed in 0.029512 second(s), 16 queries , Gzip On.

Powered by Discuz! X3.4

Copyright © 2001-2021, Tencent Cloud.

返回顶部