Unix/Linux存储控制程序
描述:
VERITAS Cluster Server远程root用户访问漏洞
详细:
Veritas Cluster服务程序是一款存储控制解决方案。
运行在Unix/Linux系统上的Veritas Cluster服务程序存在一个未明问题,远程攻击者可以利用这个漏洞以root用户权限访问系统。
目前没有提供详细漏洞细节。其中Solaris、HP-UX、AIX和Linux系统受此漏洞影响,不过Veritas Cluster Server for Windows系统不受此漏洞影响。
<*来源:Veritas
链接:http://seer.support.veritas.com/docs/271040.htm
*>
受影响系统:
Veritas Software Cluster Server 4.0
Veritas Software Cluster Server 3.5 MP2
Veritas Software Cluster Server 3.5 MP1
Veritas Software Cluster Server 3.5
Veritas Software Cluster Server 2.2 MP2
Veritas Software Cluster Server 2.2 MP1
Veritas Software Cluster Server 2.2
Veritas Software Cluster Server 2.1
Veritas Software Cluster Server 2.0
Veritas Software Cluster Server 1.3.1 中国网管联盟www.bitscn.com
Veritas Software Cluster Server 1.3
不受影响系统:
Veritas Software Cluster Server 4.0 MP1
攻击方法:
暂无有效攻击代码
解决方案:
厂商补丁:
Veritas Software
----------------
目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:
Veritas Software Cluster Server 1.3 Solaris:
Veritas Software Patch vcs.130-patch03_239344.tar.Z
http://ftp.support.veritas.com/pub/support/products/
ClusterServer_UNIX/vcs.130-patch03_239344.tar.Z
Veritas Software Cluster Server 2.2 MP2:
Veritas Software Patch
vcs.2.2_MP2_i147547a.rhel_21_i686.tar_270095.gz
http://seer.support.veritas.com/docs/270095.htm
Veritas Software Patch
vcs.2.2_MP2_i147547a.rhel_30_i686.tar_270096.gz
http://seer.support.veritas.com/docs/270096.htm
Veritas Software Patch
vcs.2.2_MP2_i147547a.rhel_30_u2_ia64.tar_270097.gz
54ne.com
http://seer.support.veritas.com/docs/270097.htm
Veritas Software Patch
vcs.2.2_MP2_i147547a.sles8_sp3_i686.tar_270092.gz
http://seer.support.veritas.com/docs/270092.htm
Veritas Software Patch
vcs.2.2_MP2_i147547a.esx_210_i686.tar_271277.gz
http://seer.support.veritas.com/docs/271277.htm
Veritas Software Cluster Server 3.5 Solaris MP3:
Veritas Software Patch vcs.3.5P3+i147547a.sol_270071.tar.Z
http://seer.support.veritas.com/docs/270071.htm
Veritas Software Cluster Server 3.5 MP1:
Veritas Software Patch vcs.3.5P1+i147547b.aix_270090.tar.Z
http://seer.support.veritas.com/docs/270090.htm
Veritas Software Cluster Server 3.5 HP-UX Update 2:
Veritas Software Patch vcs.3.5P1+i147547b.hp_270074.tar.Z
http://seer.support.veritas.com/docs/270074.htm
