iscsi-initiator-utils-6.2.0.865-0.8.1AXS3

エラータID: AXBA:2008-335:02

Release date: 
Monday, December 1, 2008 - 14:04
Subject: 
iscsi-initiator-utils-6.2.0.865-0.8.1AXS3
Affected Channels: 
Asianux Server 3 for ppc
Asianux Server 3 for ia64
Severity: 
N/A
Solution: 

Update packages.

CVEs: 
CVE-2007-3099
usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening AF_LOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service (iscsid exit or iSCSI connection loss).
CVE-2007-3100
usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with insecure permissions (world-writable/world-readable) for managing log messages using shared memory, which allows local users to cause a denial of service (hang) by grabbing the semaphore.
Additional Info: 

From Asianux Server 3 SP1 updated packages.

Download: 

SRPMS
  1. iscsi-initiator-utils-6.2.0.865-0.8.1AXS3.src.rpm
    MD5: f0e2d00299808d3cd61c69319c4c0993
    SHA-256: 3b9f599cb1ef7e1e21c86c02ce00a80fc882c6dc489c46c5238e487480d67580
    Size: 244.57 kB

Asianux Server 3 for x86
  1. iscsi-initiator-utils-6.2.0.865-0.8.1AXS3.i386.rpm
    MD5: 640cb9a90ddf1a3501aa07d4fd0ff53b
    SHA-256: b364d5ec083a297ac26fba98e2732fb6418d461311f36d367426dd5235b66af8
    Size: 510.91 kB

Asianux Server 3 for x86_64
  1. iscsi-initiator-utils-6.2.0.865-0.8.1AXS3.x86_64.rpm
    MD5: 6f52ecc6d90923316f2df0dffd93b99b
    SHA-256: 68ce47ebdc4b664046ff78e60f87fd69604f7fedd5ffc05b8144112c06759b84
    Size: 531.37 kB