[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: dsa-1289
 やã�¾ã�ã�§ã�™ã€‚
On Mon, 28 May 2007 04:24:56 +0900
Takashi Nakao <kalze@xxxxxxxxxxxxx> wrote:
> 原文ã�§ã�¯ã€�NULL ã�¨å¤§æ–‡å—ã�«ã�ªã�£ã�¦ã�„ã‚‹ã�®ã�§ã€�å�ˆã‚�ã�›ã�Ÿã�»ã�†ã�Œã‚ˆã�„ã�®ã�‹ã�ªã�¨ã�Šã‚‚
> ����。
> 「攻撃者�ファイアーウォール�特定ルールを迂回�れ�����能性��る脆
> 弱性を�
 以上2点ã�®æŒ‡æ‘˜ã‚’å�—ã�‘ã�¦ä¿®æ£ã�—ã�¾ã�—ã�Ÿã€‚
#use wml::debian::translation-check translation="1.3"
<define-tag description>Ê£¿ô¤ÎÀȼåÀ</define-tag>
<define-tag moreinfo>
<p>Linux ¥«¡¼¥Í¥ë¤Ë¡¢¥µ¡¼¥Ó¥¹µñÈÝ (DoS) ¹¶·â¤äǤ°Õ¤Î¥³¡¼¥É¤Î¼Â¹Ô¤¬²Äǽ¤È¤Ê¤ë
Ê£¿ô¤Î¥í¡¼¥«¥ë¤ª¤è¤Ó¥ê¥â¡¼¥È¤«¤é¹¶·â²Äǽ¤ÊÀȼåÀ¤¬È¯¸«¤µ¤ì¤Þ¤·¤¿¡£
Common Vulnerabilities and Exposures ¥×¥í¥¸¥§¥¯¥È¤Ç¤Ï°Ê²¼¤ÎÌäÂê¤òǧ¼±¤·¤Æ¤¤¤Þ¤¹:</p>
<ul>
<li><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1496">CVE-2007-1496</a>
<p>Michal Miroslaw ¤µ¤ó¤Ï¡¢netfilter ¤Î¥µ¡¼¥Ó¥¹µñÈÝ (DoS) ÀȼåÀ
(¥¯¥é¥Ã¥·¥å¤ò°ú¤µ¯¤³¤·¤Þ¤¹) ¤òÊó¹ð¤·¤Þ¤·¤¿¡£¹¶·â¼Ô¤¬¥ê¥â¡¼¥È¤«¤é nfnetlink_log
´Ø¿ôÃæ¤Ç NULL ¥Ý¥¤¥ó¥¿»²¾È¤ò°ú¤µ¯¤³¤¹¤³¤È¤¬²Äǽ¤Ç¤¹¡£</p></li>
<li><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1497">CVE-2007-1497</a>
<p>Patrick McHardy ¤µ¤ó¤Ï¡¢netfilter ¤Ë¤Ä¤¤¤Æ¡¢
¹¶·â¼Ô¤Ë¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤ÎÆÃÄê¥ë¡¼¥ë¤ò±ª²ó¤µ¤ì¤Æ¤·¤Þ¤¦²ÄǽÀ¤Î¤¢¤ëÀȼåÀ¤òÊó¹ð¤·¤Þ¤·¤¿¡£
ºÆ¹½À®¤µ¤ì¤¿ IPv6 ¥Ñ¥±¥Ã¥È¥Õ¥é¥°¥á¥ó¥È¤Î nfcfinfo Ãͤ¬¸í¤Ã¤Æ 0 ¤Ë½é´ü²½¤µ¤ì¤Æ¤¤¤ë¤¿¤á¡¢
¤³¤ì¤é¤Î¥Ñ¥±¥Ã¥È¤¬ ESTABLISHED ¤È¤·¤Æ°·¤ï¤ì¤Æ¤·¤Þ¤¤¤Þ¤¹¡£</p></li>
<li><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1861">CVE-2007-1861</a>
<p>Jaco Kroon ¤µ¤ó¤Ï¡¢NETLINK_FIB_LOOKUP ¥Ñ¥Ã¥±¡¼¥¸¤¬¥«¡¼¥Í¥ë¤ËÀµ¤·¤¯À©¸æ¤ò
Ìᤷ¤Æ¤¤¤Ê¤¤¤¿¤á¡¢Ìµ¸Â¥ë¡¼¥×¤È¤Ê¤ë¥Ð¥°¤òÊó¹ð¤·¤Þ¤·¤¿¡£
¥í¡¼¥«¥ë¥æ¡¼¥¶¤Ï¡¢¤³¤Îµóư¤ò¹¶·â¤¹¤ë¤³¤È¤Ç¥µ¡¼¥Ó¥¹ÉÔǽ (DoS) ¾õÂÖ (¥¯¥é¥Ã¥·¥å)
¤ò°ú¤µ¯¤³¤¹¤³¤È¤¬²Äǽ¤Ç¤¹¡£</p></li>
</ul>
<p>¤³¤ÎÌäÂê¤Ï°ÂÄêÈǥǥ£¥¹¥È¥ê¥Ó¥å¡¼¥·¥ç¥ó (stable¡¢¥³¡¼¥É¥Í¡¼¥à etch) ¤Ç¤Ï¡¢
¥Ð¡¼¥¸¥ç¥ó 2.6.18.dfsg.1-12etch2 ¤Ç½¤Àµ¤µ¤ì¤Æ¤¤¤Þ¤¹¡£</p>
<p>°Ê²¼¤Îɽ¤Ï¡¢¸ß´¹À¤ä¤³¤Î¹¹¿·¤Ø¤ÎÂбþ¤Î¤¿¤á¤ËºÆ¥Ó¥ë¥É¤µ¤ì¤¿Äɲåѥ屡¼¥¸¤Î¥ê¥¹¥È¤Ç¤¹:</p>
<div class="centerdiv"><table cellspacing="0" cellpadding="2">
<tr><th></th> <th>Debian 4.0 (etch)</th></tr>
<tr><td>fai-kernels</td> <td>1.17+etch2</td></tr>
<tr><td>user-mode-linux</td> <td>2.6.18-1um-2etch2</td></tr>
<tr><td>kernel-patch-openvz</td><td>028.18.1etch1</td></tr>
</table></div>
<p>ľ¤Á¤Ë¥«¡¼¥Í¥ë¥Ñ¥Ã¥±¡¼¥¸¤ò¹¹¿·¤·¤Æ¥Þ¥·¥ó¤ÎºÆµ¯Æ°¤ò¹Ô¤¦¤³¤È¤ò¤ª´«¤á¤·¤Þ¤¹¡£
¥«¥¹¥¿¥à¥«¡¼¥Í¥ë¤ò¥«¡¼¥Í¥ë¥½¡¼¥¹¥Ñ¥Ã¥±¡¼¥¸¤«¤é¹½ÃÛ¤·¤Æ¤¤¤¿¾ì¹ç¡¢
¤³¤ì¤é¤ÎÊѹ¹¤ËÂбþ¤¹¤ë¤¿¤á¤ËºÆ¥Ó¥ë¥É¤¹¤ëɬÍפ¬¤¢¤ê¤Þ¤¹¡£</p>
</define-tag>
# do not modify the following line
#include "$(ENGLISHDIR)/security/2007/dsa-1289.data"