ulovko 发表于 2012-07-26 18:16

都帮忙看看 这个到底有没有危险 不是很清楚严重程度 O_o

本帖最后由 ulovko 于 2012-07-26 18:16 编辑

ko# portaudit -Fda
auditfile.tbz                                 100% of   78 kB   80 kBps
New database installed.
Database created: Thu Jul 26 18:10:06 CST 2012
Affected package: php5-5.4.4
Type of problem: php -- potential overflow in _php_stream_scandir.
Reference: http://portaudit.FreeBSD.org/bdab0acd-d4cd-11e1-8a1c-14dae9ebcf89.html

Affected package: chromium-19.0.1084.56_1
Type of problem: chromium -- multiple vulnerabilities.
Reference: http://portaudit.FreeBSD.org/ff922811-c096-11e1-b0f4-00262d5ed8ee.html

2 problem(s) in your installed packages found.

You are advised to update or deinstall the affected package(s) immediately.
http://portaudit.FreeBSD.org/bdab0acd-d4cd-11e1-8a1c-14dae9ebcf89.html
http://portaudit.FreeBSD.org/ff922811-c096-11e1-b0f4-00262d5ed8ee.html

什么都是青蛙 发表于 2012-07-26 18:39

:mrgreen:升级下吧，应该是有危险性的。

什么都是青蛙 发表于 2012-07-26 18:41

http://securitytracker.com/id/1027287   

A remote user may be able to to trigger an overflow in the _php_stream_scandir() function and potentially execute arbitrary code on the target system.

ulovko 发表于 2012-07-26 19:38

回复 3# 什么都是青蛙


    chromium 不编译有没有危险的 这个很费事 ^_^
页: [1]
查看完整版本: 都帮忙看看 这个到底有没有危险 不是很清楚严重程度 O_o