CVE:CVE-2004-0649
CNNVD:CNNVD-200408-025
l2tpd是一个二层隧道协议守护进程，它基于RFC 2661。
l2tpd存在基于BSS的缓冲区溢出问题，远程攻击者可以利用这个漏洞使应用程序崩溃。
问题是由于应用程序不正确验证用户提供的字符串长度，攻击者至少可以利用这个漏洞使受影响的应用程序不稳定或崩溃。问题存在于control.c中的write_packet()函数中。
solution:Upgrade l2tpd l2tpd to a higher version than 0.62,0.63,0.64,0.65,0.66,0.67,0.68,0.69,and avoid the version 0.62,0.63,0.64,0.65,0.66,0.67,0.68,0.69; Upgrade gentoo linux to a higher version than 1.4,and avoid the version 1.4