酷客天堂 - EMC Dantz Retrospect Backup Client远程缓冲区溢出漏洞

EMC Dantz Retrospect Backup Client远程缓冲区溢出漏洞

	【责编】：AcOol 【作者】：不详	【添加】：2006-5-12 【更新】：2006-5-12
	【出处】：绿盟科技【字体】：[ 小大 ]	【浏览】：

受影响系统：

EMC Dantz Retrospect Client for Windows
EMC Dantz Retrospect Client for Solaris
EMC Dantz Retrospect Client for NetWare
EMC Dantz Retrospect Client for Macintosh
EMC Dantz Retrospect Client for Linux

不受影响系统：

EMC Dantz Retrospect Client for Windows 7.5
EMC Dantz Retrospect Client for Windows 7.0
EMC Dantz Retrospect Client for Windows 6.5
EMC Dantz Retrospect Client for Solaris 7.5
EMC Dantz Retrospect Client for Solaris 7.0
EMC Dantz Retrospect Client for Solaris 6.5
EMC Dantz Retrospect Client for NetWare 1.0
EMC Dantz Retrospect Client for Macintosh 6.1
EMC Dantz Retrospect Client for Macintosh 5.1
EMC Dantz Retrospect Client for Linux 7.5
EMC Dantz Retrospect Client for Linux 7.0
EMC Dantz Retrospect Client for Linux 6.5

描述：

BUGTRAQ  ID: 17948

EMC Dantz Retrospect是为中小企业设计的备份和灾难恢复系统。

Retrospect客户端软件存在远程缓冲区溢出漏洞，攻击者可以通过向497端口发送畸形报文导致执行任意指令。

此漏洞仅影响Retrospect客户端。

<*来源：Nicolas Pouvesle
        Stanka Šalamun

  链接：http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=9511&r=0.8686334
*>
建议：

厂商补丁：

EMC
---
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

Retrospect Client for Windows 7.5:

http://download.dantz.com/archives/Retro-EN_7_5_116.exe

Retrospect Client for Windows 7.0:

http://download.dantz.com/archives/RetroClient-EN_7_0_112.exe

Retrospect Client for Windows 6.5:

http://download.dantz.com/archives/RetroClient-EN_6_5_140.exe

Retrospect Client for Macintosh 6.1:

http://download.dantz.com/archives/Client_OS_X-6_1_130.dmg

Retrospect Client for Macintosh 5.1:

http://download.dantz.com/archives/Classic-Client-EN_5_1_180.sit

Retrospect Client for Linux 7.5:

(rpm) - http://download.dantz.com/archives/retroclient-75_linux.rpm

(tar) - http://download.dantz.com/archives/retroclient-75_linux.tar

Retrospect Client for Linux 7.0:

(rpm) - http://download.dantz.com/archives/retroclient-70_linux.rpm

(tar) - http://download.dantz.com/archives/retroclient-70_linux.tar

Retrospect Client for Linux 6.5:

(rpm) - http://download.dantz.com/archives/retroclient-65_linux.rpm

(tar) -  http://download.dantz.com/archives/retroclient-65_linux.tar

Retrospect Client for Solaris 7.5:

(pkg) - http://download.dantz.com/archives/retroclient-75_solaris.pkg

(tar) - http://download.dantz.com/archives/retroclient-75_solaris.tar

Retrospect Client for Solaris 7.0:

(pkg) - http://download.dantz.com/archives/retroclient-70_solaris.pkg

(tar) - http://download.dantz.com/archives/retroclient-70_solaris.tar

Retrospect Client for Solaris 6.5:

(pkg) - http://download.dantz.com/archives/retroclient-65_solaris.pkg

(tar) - http://download.dantz.com/archives/retroclient-65_solaris.tar

Retrospect Client for NetWare 1.0:

http://download.dantz.com/archives/Novell-70.zip

·本站特别声明不要转载或作者授权本站独家播发的文章，请勿转载。
·本站原创文章可自由转载，但本站作者及本站链接必须保留。
·非本站原创文章可自由转载，请按作者及文章出处一节，自行链接。
·转载之图片、文件，链接请不要盗链到本站，且不准打上各自站点的水印，亦不能抹去我站点水印。

+ 本站推荐 +

·EMC Dantz Retrospect Backup

·Apple QuickTime多个整数及缓冲

·phpBB Chart模块跨站脚本及SQL

·Microsoft Infotech存储库itss

·phpBB Auction模块远程文件包含

+ 相关漏洞 +

·RSync receive_xattr调用整数溢

·Backup Exec for Windows Serv

+ 热点漏洞 +

·Microsoft Windows Media Play

·RARLAB WinRAR命令行处理溢出漏

·Microsoft IE JavaScript OnLo

·SuSE Linux <= 9.3, 10 (chfn)

·McAfee VirusScan路径指定权限

+ 本站发布 +