FreeBSD libc Berkley DB接口未初始化内存本地信息泄漏漏洞

BUGTRAQ ID: 34666 CNCAN ID：CNCAN-2009042302 FreeBSD是一款开放源代码的BSD操作系统。 FreeBSD libc Berkeley DB接口写malloc(3)中获得的未初始化内存到数据库文件，本地攻击者可以利用漏洞获得敏感信息。 FreeBSD FreeBSD 7.1-STABLE FreeBSD FreeBSD 7.1-RELEASE-p4 FreeBSD FreeBSD 7.1 -RELEASE-p2 FreeBSD FreeBSD 7.1 -RELEASE-p1 FreeBSD FreeBSD 7.1 -PRE-RELEASE FreeBSD FreeBSD 7.0-STABLE FreeBSD FreeBSD 7.0-RELEASE-p8 FreeBSD FreeBSD 7.0-RELEASE-p11 FreeBSD FreeBSD 7.0-RELEASE-p11 FreeBSD FreeBSD 7.0-RELEASE FreeBSD FreeBSD 7.0 BETA4 FreeBSD FreeBSD 7.0 -RELENG FreeBSD FreeBSD 7.0 -RELEASE-p9 FreeBSD FreeBSD 7.0 -PRERELEASE FreeBSD FreeBSD 7.0 FreeBSD FreeBSD 6.4-RELEASE-p2 FreeBSD FreeBSD 6.4 -RELEASE-p3 FreeBSD FreeBSD 6.4 -RELEASE FreeBSD FreeBSD 6.3 -RELENG FreeBSD FreeBSD 6.3 -RELEASE-p9 FreeBSD FreeBSD 6.3 -RELEASE-p8 FreeBSD FreeBSD 6.3 -RELEASE-p6 FreeBSD FreeBSD 6.3 可参考如下补丁信息： FreeBSD FreeBSD 7.0-RELEASE-p8 FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 7.1 -PRE-RELEASE FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 6.3 FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 6.3 -RELEASE-p6 FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 7.0 BETA4 FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 7.0-STABLE FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 6.3 -RELEASE-p8 FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 7.0 -RELEASE-p9 FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 6.4 -RELEASE-p3 FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 7.1-STABLE FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 6.4 -RELEASE FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 6.4-RELEASE-p2 FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 6.3 -RELENG FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 7.1-RELEASE-p4 FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 7.0-RELEASE FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 7.0 FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 7.0 -PRERELEASE FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 7.0-RELEASE-p11 FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 7.1 -RELEASE-p1 FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 6.3 -RELEASE-p9 FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 7.1 -RELEASE-p2 FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 7.0-RELEASE-p11 FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a> FreeBSD FreeBSD 7.0 -RELENG FreeBSD libc.patch <a href=http://security.freebsd.org/patches/SA-09:07/libc.patch target=_blank rel=external nofollow>http://security.freebsd.org/patches/SA-09:07/libc.patch</a>