ESRI ArcInfo Workstation多个本地缓冲区溢出及格式化字符串漏洞

漏洞信息详情

ESRI ArcInfo Workstation 9.0的ArcGIS存在格式化字符串漏洞，本地用户可以通过在传递给(1)wservice或(2)lockmgr的ARCHOME环境变量中的格式化字符串限定符来获取权限。

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

ESRI ArcInfo Workstation on UNIX 8.3

ESRI ArcInfo Workstation 8.3 Security Patch on UNIX

http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=14&MetaID=1020

来源: MISC

链接:http://www.digitalmunition.com/DMA%5B2005-0425a%5D.txt

来源: SECTRACK

名称: 1013852

链接:http://securitytracker.com/id?1013852

来源: SECUNIA

名称: 15196

链接:http://secunia.com/advisories/15196

来源: support.esri.com

链接:http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=14&MetaID=1015

来源: FULLDISC

名称: 20050430 DMA[2005-0425a] - 'ESRI ArcGIS 9.x multiple local vulnerabilities

链接:http://marc.theaimsgroup.com/?l=full-disclosure&m=111489411524630&w=2

暂无