CVE:CVE-2002-1506
CNNVD:CNNVD-200304-014
Linuxconf 1.28r4之前版本存在缓冲区溢出漏洞。本地用户借助超长环境变量执行任意代码。该漏洞溢出一个已产生的错误字符串。
solution:Upgrade jacques_gelinas linuxconf to a higher version than 1.1.6r10,1.1.7,1.1.8,1.1.9r1,1.1.9r2,1.2,1.2.1,1.2.1r1,1.2.1r2,1.2.1r3,1.2.1r4,1.2.1r5,1.2.1r6,1.2.1r7,1.2.1r8,1.2.2,1.2.3,1.2.3r1,1.2.3r2,1.2.4,1.2.4r2,1.2.4r4,1.2.4r5,1.2r1,1.2r2,1.27,1.27r3,1.27r4,1.27r5,1.28,1.28r1,1.28r2,1.28r3,and avoid the version 1.1.6r10,1.1.7,1.1.8,1.1.9r1,1.1.9r2,1.2,1.2.1,1.2.1r1,1.2.1r2,1.2.1r3,1.2.1r4,1.2.1r5,1.2.1r6,1.2.1r7,1.2.1r8,1.2.2,1.2.3,1.2.3r1,1.2.3r2,1.2.4,1.2.4r2,1.2.4r4,1.2.4r5,1.2r1,1.2r2,1.27,1.27r3,1.27r4,1.27r5,1.28,1.28r1,1.28r2,1.28r3