CVE:CVE-2004-2409
CNNVD:CNNVD-200412-577
Samhain 1.8.9至2.0.1版本的sh_hash_compdata函数存在缓冲区溢出漏洞。攻击者运行更新模式("-t update")时执行任意代码。
solution:Upgrade samhain_labs samhain to a higher version than 1.8.9,1.8.10,1.8.10a,1.8.10b,1.8.11,1.8.12,1.8.12a,1.8.12b,2.0.0,2.0.1,and avoid the version 1.8.9,1.8.10,1.8.10a,1.8.10b,1.8.11,1.8.12,1.8.12a,1.8.12b,2.0.0,2.0.1