SSH Tectia Windows特定路径特权提升漏洞

2006-12-12T00:00:00
ID SSV:880
Type seebug
Reporter Root
Modified 2006-12-12T00:00:00

Description

SSH Tectia基于SSH技术,集中管理情况下提供 安全的系统管理,安全的文件传输,安全的程序之间的连接。 Windows版本下的SSH Tectia产品在子进程执行中处理路径名存在漏洞,本地攻击者可以利用漏洞提升特权。 如果本地用户允许建立系统盘ROOT目录中或者"Program Files"文件夹或其子目录中建立文件,就可能放置恶意程序代替正确的SSH Tectia子组件,结果导致以高权限执行任意程序。

SSH Communications Security Tectia Server 5.0.1 SSH Communications Security Tectia Server 5.0 SSH Communications Security Tectia Server 4.4.5 SSH Communications Security Tectia Server 4.4.4 SSH Communications Security Tectia Server 4.4.3 SSH Communications Security Tectia Server 4.4.2 SSH Communications Security Tectia Server 4.4 SSH Communications Security Tectia Server 4.3.7 SSH Communications Security Tectia Server 4.3.6 SSH Communications Security Tectia Server 4.3.5 SSH Communications Security Tectia Server 4.3.4 SSH Communications Security Tectia Server 4.3.3 SSH Communications Security Tectia Server 4.3.2 SSH Communications Security Tectia Server 4.3.1 SSH Communications Security Tectia Server 4.3 SSH Communications Security Tectia Server 4.2.1 SSH Communications Security Tectia Server 4.0.5 SSH Communications Security Tectia Server 4.0.4 SSH Communications Security Tectia Server 4.0.3 SSH Communications Security Tectia Server 4.0 SSH Communications Security Tectia Manager 2.1.2 SSH Communications Security Tectia Connector 5.0.1 SSH Communications Security Tectia Connector 5.0 SSH Communications Security Tectia Client 5.0.1 SSH Communications Security Tectia Client 5.0 SSH Communications Security Tectia Client 4.4.5 SSH Communications Security Tectia Client 4.4.4 SSH Communications Security Tectia Client 4.4.3 SSH Communications Security Tectia Client 4.4.2 SSH Communications Security Tectia Client 4.4.1 SSH Communications Security Tectia Client 4.4 SSH Communications Security Tectia Client 4.3.8 K SSH Communications Security Tectia Client 4.3.7 SSH Communications Security Tectia Client 4.3.6 SSH Communications Security Tectia Client 4.3.5 SSH Communications Security Tectia Client 4.3.4 SSH Communications Security Tectia Client 4.3.3 SSH Communications Security Tectia Client 4.3.2 SSH Communications Security Tectia Client 4.3.1 J SSH Communications Security Tectia Client 4.3.1 SSH Communications Security Tectia Client 4.3 SSH Communications Security Tectia Client 4.2.1 SSH Communications Security Tectia Client 4.2 SSH Communications Security Tectia Client 4.0.5 SSH Communications Security Tectia Client 4.0.4 SSH Communications Security Tectia Client 4.0.3 SSH Communications Security Tectia Client 4.0.1 SSH Communications Security Tectia Client 4.0 SSH Communications Security SSH Tectia Manager 1.4 SSH Communications Security SSH Tectia Manager 1.3

如下版本已经修正此问题,建议下载使用: * SSH Tectia Server/Client 4.4.6 * SSH Tectia Server/Client/Connector 5.0.2 * SSH Tectia Server/Client/Connector 5.1.0 * SSH Tectia Client 4.3.9K * SSH Tectia Client 4.3.2J * SSH Tectia Manager 2.1.3 * SSH Tectia Manager 2.2.0 <a href="http://www.ssh.com/support/downloads/" target="_blank">http://www.ssh.com/support/downloads/</a>