CVE:CVE-2010-1938
CNNVD:CNNVD-201005-409
FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。
FreeBSD所使用的OPIE认证系统中readrec.c文件的opiereadrec()函数存在单字节栈溢出漏洞，在启用了栈保护的情况下，攻击者可以远程导致使用OPIE的服务进程崩溃。
solution:Upgrade freebsd freebsd to a higher version than 6:stable,6.4,6.4:release,6.4:release_p2,6.4:release_p3,6.4:release_p4,6.4:release_p5,6.4:stable,7.0,7.0:beta_4,7.0:current,7.0:pre-release,7.0:release,7.0:release-p12,7.0:release-p8,7.0:release-p9,7.0:releng,7.0:stable,7.0-release,7.0_beta4,7.0_releng,7.1,7.1:pre-release,7.1:rc1,7.1:release-p1,7.1:release-p2,7.1:release-p4,7.1:release-p5,7.1:release-p6,7.1:stable,7.2,7.2:pre-release,7.2:stable,8.0,8.1-prerelease,and avoid the version 6:stable,6.4,6.4:release,6.4:release_p2,6.4:release_p3,6.4:release_p4,6.4:release_p5,6.4:stable,7.0,7.0:beta_4,7.0:current,7.0:pre-release,7.0:release,7.0:release-p12,7.0:release-p8,7.0:release-p9,7.0:releng,7.0:stable,7.0-release,7.0_beta4,7.0_releng,7.1,7.1:pre-release,7.1:rc1,7.1:release-p1,7.1:release-p2,7.1:release-p4,7.1:release-p5,7.1:release-p6,7.1:stable,7.2,7.2:pre-release,7.2:stable,8.0,8.1-prerelease; Upgrade nrl opie to a higher version than *:test1,2.2,2.3,2.4,2.10,2.11,2.21,2.22,2.32,and avoid the version *:test1,2.2,2.3,2.4,2.10,2.11,2.21,2.22,2.32