Lucene search
RootSSV:4608HistoryDec 31, 2008 - 12:00 a.m.
Netatalk打印请求任意代码注入漏洞
2008-12-3100:00:00
Root
www.seebug.org
31
0.013 Low
EPSS
Percentile
84.3%
BUGTRAQ ID: 32925
CVE(CAN) ID: CVE-2008-5718
Netatalk是一组服务程序和工具集合，用于在Unix兼容的系统上处理各种Apple机器上所使用的协议。
Netatalk的papd守护程序没有正确地过滤某些接收到的参数便在popen()调用中使用，这允许远程攻击者通过提交特制的打印请求导致执行任意命令。
Netatalk 2.0.4
厂商补丁：
Netatalk
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
<a href=“http://sourceforge.net/project/showfiles.php?group_id=8642&package_id=8774&release_id=648189” target=“_blank”>http://sourceforge.net/project/showfiles.php?group_id=8642&package_id=8774&release_id=648189</a>
Related
nessus
nessus
openSUSE 10 Security Update : netatalk (netatalk-5989)
2009-02-12 00:00:00
SuSE 10 Security Update : netatalk (ZYPP Patch Number 5983)
2009-09-24 00:00:00
openSUSE Security Update : netatalk (netatalk-510)
2009-07-21 00:00:00
securityvulns
securityvulns
netatalk shell characters vulnerabilities
2009-02-01 00:00:00
[SECURITY] [DSA 1705-1] New netatalk packages fix arbitrary code execution
2009-01-18 00:00:00
[SECURITY] [DSA 1704-2] Updated netatalk packages fix denial of service
2009-02-01 00:00:00
openvas
openvas
Debian Security Advisory DSA 1705-1 (netatalk)
2009-01-20 00:00:00
SLES10: Security update for netatalk
2009-10-13 00:00:00
Fedora Core 10 FEDORA-2009-3069 (netatalk)
2009-03-31 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package netatalk version 2.0.5-alt1
2009-12-22 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: netatalk-2.0.3-23.fc10
2009-03-26 14:58:15
[SECURITY] Fedora 9 Update: netatalk-2.0.3-21.fc9
2009-03-26 14:57:33
debian
debian
[SECURITY] [DSA 1705-1] New netatalk packages fix arbitrary code execution
2009-01-15 21:01:06
[SECURITY] [DSA 1704-2] Updated netatalk packages fix denial of service
2009-01-29 21:53:50
redhatcve
redhatcve
CVE-2008-5718
2019-10-04 20:56:39
ubuntucve
ubuntucve
CVE-2008-5718
2008-12-26 00:00:00
cvelist
cvelist
CVE-2008-5718
2008-12-26 17:08:00
cve
cve
CVE-2008-5718
2008-12-26 17:30:00
prion
prion
Command injection
2008-12-26 17:30:00
freebsd
freebsd
netatalk -- arbitrary command execution in papd daemon
2008-12-19 00:00:00
debiancve
debiancve
CVE-2008-5718
2008-12-26 17:30:00