IBM Lotus Sametime StMux.exe·þÎñÕ»Òç³ö©¶´

·¢²¼ÈÕÆÚ£º2008-05-21
¸üÐÂÈÕÆÚ£º2008-05-22

ÊÜÓ°Ïìϵͳ£º

IBM Lotus Sametime 8.0
IBM Lotus Sametime 7.5.1
IBM Lotus Sametime 7.5
IBM Lotus Sametime 7.0

²»ÊÜÓ°Ïìϵͳ£º

IBM Lotus Sametime 8.0.1

ÃèÊö£º

---

BUGTRAQ  ID: 29328

Lotus SametimeÊÇIBMÍƳöµÄͳһÉÌÎñЭ×÷ƽ̨£¬¼¯³ÉÁ˼´Ê±ÏûÏ¢ÓëWeb»áÒé¡¢ÓïÒôͨѶ¡¢Òƶ¯É豸µÈ·þÎñ¡£

Lotus SametimeÖÐĬÈϼàÌýÓÚTCP 1533¶Ë¿ÚÉϵÄCommunity Services Multiplexer£¨StMux.exe£©·þÎñûÓÐÕýÈ·µØ´¦Àí³¬³¤µÄURL£¬Í¨¹ýHTTPÓëSametime·þÎñÆ÷´´½¨ÁËÁ¬½ÓµÄÔ¶³Ì¹¥»÷Õß¿ÉÒÔÏòsscanf()º¯ÊýÌá½»¶ñÒâHTTPÇëÇó´¥·¢Õ»Òç³ö£¬µ¼ÖÂÖ´ÐÐÈÎÒâ´úÂë¡£

<*À´Ô´£ºManuel Santamarina Suarez £¨FistFuXXer@gmx.de£©
  
  Á´½Ó£ºhttp://www.zerodayinitiative.com/advisories/ZDI-08-028/
        http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21303920
        http://secunia.com/advisories/30309/
*>

½¨Ò飺

---

³§É̲¹¶¡£º

IBM
---
Ä¿Ç°³§ÉÌÒѾ­·¢²¼ÁËÉý¼¶²¹¶¡ÒÔÐÞ¸´Õâ¸ö°²È«ÎÊÌ⣬Çëµ½³§É̵ÄÖ÷Ò³ÏÂÔØ£º

http://www.ibm.com/eserver/support/fixes/fixcentral/swg/quickorder?brandid=2&productid=Lotus%20Sametime&fixes=ST-7.5.1.1-Windows-ICAE-7DPP83