Linux Kernel RNDIS_Query_Response Remote Buffer Overflow Vulnerability..

St.AnGeR

St.AnGeR

Document Visor..
Katılım
17 Haz 2005
Mesajlar
1,832
Reaction score
0
Puanları
0
Konum
ιѕт              HHuser№: 9          Remote Admi
Bugtraq ID: 17831
Class: Boundary Condition Error
CVE: CVE-2006-1368

Remote: Yes
Local: No
Published: May 04 2006 12:00AM
Updated: May 04 2006 07:55PM
Credit: Shaun Tancheff <[email protected]> discovered this issue.
Vulnerable: Ubuntu Ubuntu Linux 5.10 powerpc
Ubuntu Ubuntu Linux 5.10 i386
Ubuntu Ubuntu Linux 5.10 amd64
Ubuntu Ubuntu Linux 5.0 4 powerpc
Ubuntu Ubuntu Linux 5.0 4 i386
Ubuntu Ubuntu Linux 5.0 4 amd64
Linux kernel 2.6.15 .4
Linux kernel 2.6.15 .3
Linux kernel 2.6.15 .2
Linux kernel 2.6.15 .1
Linux kernel 2.6.15 -rc3
Linux kernel 2.6.15 -rc2
Linux kernel 2.6.15 -rc1
Linux kernel 2.6.15
Linux kernel 2.6.15
Linux kernel 2.6.15
Linux kernel 2.6.15
Linux kernel 2.6.15
Linux kernel 2.6.14 .5
Linux kernel 2.6.14 .4
Linux kernel 2.6.14 .3
Linux kernel 2.6.14 .2
Linux kernel 2.6.14 .1
Linux kernel 2.6.14 -rc4
Linux kernel 2.6.14 -rc3
Linux kernel 2.6.14 -rc2
Linux kernel 2.6.14 -rc1
Linux kernel 2.6.14
Linux kernel 2.6.13 .4
Linux kernel 2.6.13 .3
Linux kernel 2.6.13 .2
Linux kernel 2.6.13 .1
Linux kernel 2.6.13 -rc7
Linux kernel 2.6.13 -rc6
Linux kernel 2.6.13 -rc4
Linux kernel 2.6.13 -rc1
Linux kernel 2.6.13
Linux kernel 2.6.12 .6
Linux kernel 2.6.12 .5
Linux kernel 2.6.12 .4
Linux kernel 2.6.12 .3
Linux kernel 2.6.12 .2
Linux kernel 2.6.12 .1
Linux kernel 2.6.12 -rc5
Linux kernel 2.6.12 -rc4
Linux kernel 2.6.12 -rc1
Linux kernel 2.6.11 .8
Linux kernel 2.6.11 .7
Linux kernel 2.6.11 .6
Linux kernel 2.6.11 .5
Linux kernel 2.6.11 .12
Linux kernel 2.6.11 .11
Linux kernel 2.6.11 -rc4
Linux kernel 2.6.11 -rc3
Linux kernel 2.6.11 -rc2
Linux kernel 2.6.11
+ RedHat Fedora Core4
Linux kernel 2.6.10 rc2
Linux kernel 2.6.10
+ RedHat Fedora Core3
+ RedHat Fedora Core2
+ Trustix Secure Linux 3.0
+ Ubuntu Ubuntu Linux 5.0 4 powerpc
+ Ubuntu Ubuntu Linux 5.0 4 i386
+ Ubuntu Ubuntu Linux 5.0 4 amd64
Linux kernel 2.6.9
Linux kernel 2.6.8 rc3
Linux kernel 2.6.8 rc2
Linux kernel 2.6.8 rc1
+ Ubuntu Ubuntu Linux 4.1 ppc
+ Ubuntu Ubuntu Linux 4.1 ia64
+ Ubuntu Ubuntu Linux 4.1 ia32
Linux kernel 2.6.8
+ S.u.S.E. Linux Personal 9.2 x86_64
+ S.u.S.E. Linux Personal 9.2
+ Ubuntu Ubuntu Linux 4.1 ppc
+ Ubuntu Ubuntu Linux 4.1 ia64
+ Ubuntu Ubuntu Linux 4.1 ia32
Linux kernel 2.6.7 rc1
Linux kernel 2.6.7
Linux kernel 2.6.6 rc1
Linux kernel 2.6.6
Linux kernel 2.6.5
+ S.u.S.E. Linux Enterprise Server 9
+ S.u.S.E. Linux Personal 9.1 x86_64
+ S.u.S.E. Linux Personal 9.1
Linux kernel 2.6.4
Linux kernel 2.6.3
Linux kernel 2.6.2
Linux kernel 2.6.1 -rc2
Linux kernel 2.6.1 -rc1
Linux kernel 2.6.1
Linux kernel 2.6 .10
Linux kernel 2.6 -test9-CVS
Linux kernel 2.6 -test9
Linux kernel 2.6 -test8
Linux kernel 2.6 -test7
Linux kernel 2.6 -test6
Linux kernel 2.6 -test5
Linux kernel 2.6 -test4
Linux kernel 2.6 -test3
Linux kernel 2.6 -test2
Linux kernel 2.6 -test11
Linux kernel 2.6 -test10
Linux kernel 2.6 -test1
Linux kernel 2.6
Linux kernel 2.6.15.5


Not Vulnerable: Linux kernel 2.6.16


http://www.securityfocus.com/bid/17831
 
discussion & solitions..

The Linux kernel is prone to a remote buffer-overflow vulnerability. This issue is due to the kernel's failure to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.

This issue allows remote attackers to crash affected computers. Presumably, attackers could execute arbitrary machine code in the context of affected kernels, but this has not been confirmed.

Linux kernel versions in the 2.6 series prior to 2.6.16 are vulnerable to this issue



------------------------------------------------------------------------------

Kod: 
Solution:
Linux kernel version 2.6.16 was released to address this issue.

Please see the references for more information and vendor advisories.


Linux kernel 2.6.15.5

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6 -test6

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6 -test4

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6 -test2

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6 -test11

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6 -test9-CVS

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6 

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6 -test3

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6 .10

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6 -test5

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6 -test1

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6 -test7

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6 -test9

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6 -test8

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6 -test10

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.1 -rc1

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.1 -rc2

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.1 

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.10 rc2

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.10 

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.11 

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.11 .6

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.11 .12

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.11 -rc2

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.11 .5

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.11 -rc3

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.11 -rc4

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.11 .11

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.11 .7

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.12 .4

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.12 .3

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.12 .1

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.12 .5

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.12 -rc4

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.12 .2

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.12 .6

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.12 -rc5

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.13 -rc4

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.13 .3

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.13 

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.13 -rc7

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.13 -rc1

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.13 .2

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.13 .4

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.14 -rc2

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.14 .5

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.14 .4

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.14 -rc3

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.14 

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.14 -rc1

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.14 -rc4

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.14 .2

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.14 .1

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.14 .3

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.15 

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.15 -rc1

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.15 -rc3

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.15 .2

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.15 .1

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.15 .4

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.15 .3

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.15 -rc2

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.15 

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.2 

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.3 

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.4 

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.5 

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.6 rc1

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.6 

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.7 rc1

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.7 

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.8 rc3

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.8 rc2

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.8 rc1

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.8 

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2


Linux kernel 2.6.9 

Linux linux-2.6.16.tar.bz2
http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2
 
thank st.anger nick süper bu arada.en sevdiğim şarkı.:)
 
Cevap yazmak için giriş yap yada kayıt ol.
Geri
Üst