CVE:CVE-2001-0869
CNNVD:CNNVD-200112-126
Cyrus SASL库(cyrus-sasl)中common.c的默认记录回调函数_sasl_syslog存在格式串漏洞。远程攻击者利用该漏洞执行任意命令。
solution:Upgrade caldera openlinux_workstation to a higher version than 3.1,and avoid the version 3.1; Upgrade redhat linux_powertools to a higher version than 6.2,and avoid the version 6.2; Upgrade caldera openlinux_eserver to a higher version than 3.1,and avoid the version 3.1; Upgrade redhat linux to a higher version than 7.0,7.2,and avoid the version 7.0,7.2; Upgrade suse suse_linux to a higher version than 7.0,7.1,7.2,7.3,and avoid the version 7.0,7.1,7.2,7.3