drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Pufferüberläufe in Snort
Name: |
Pufferüberläufe in Snort |
|
ID: |
200703-01:02 |
|
Distribution: |
Gentoo |
|
Plattformen: |
Keine Angabe |
|
Datum: |
Sa, 3. März 2007, 20:44 |
|
Referenzen: |
Keine Angabe |
|
Applikationen: |
Snort |
|
Originalnachricht |
--KDt/GgjP6HVcx58l Content-Type: text/plain; charset=us-ascii Content-Disposition: inline
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory [ERRATA UPDATE] GLSA 200703-01:02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Severity: High Title: Snort: Remote execution of arbitrary code Date: February 23, 2007 Updated: March 02, 2007 Bugs: #167730 ID: 200703-01:02
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Errata ======
The initial workaround provided by the GLSA does not avoid the mentioned vulnerability.
The corrected section appears below.
Workaround ==========
Disable the DCE/RPC processor by commenting the 'preprocessor dcerpc' section in /etc/snort/snort.conf .
Availability ============
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-200703-01.xml
Concerns? =========
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at http://bugs.gentoo.org.
License =======
Copyright 2007 Gentoo Foundation, Inc; referenced text belongs to its owner(s).
The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
--KDt/GgjP6HVcx58l Content-Type: application/pgp-signature Content-Disposition: inline
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux)
iQEVAwUBRenMQzvRww8BFPxFAQJB8Af+L2HC1ELa6HjhVhHBtdovbgzPBxsf+pEb kY+VBJwN+xy8T6gxvH/aOhU9aCcXmPD+Rpz+jMZLzLKEZ+ObECLmWpaNKZoe41Jo 2GgAGglH9nV3N0llSFXJgwckZyqOCquuMXqEYwNMuOcXZ5tbRa4w0NvTMCrXvtJx bwdmYuaRzo5EBdQg9AoVi9qi65H0y7/JlqewyDI+lWzHVIEWMBTxAr2A2dL3GtID XoXc7znUftu8Ps8HDewoZTLGVqecRUtYN0chYs/x79Og+R1f8qJa7n/dsEKIhblb azJ1GrBivfHqZ3rTm+0zCTanu5unf5Ani+ekVTWze3kWkOb2gO6eCg== =czsS -----END PGP SIGNATURE-----
--KDt/GgjP6HVcx58l-- -- gentoo-announce@gentoo.org mailing list
|
|
|
|