一、 漏洞 CVE-2013-0288 基础信息

受影响产品

二、漏洞 CVE-2013-0288 的公开POC

三、漏洞 CVE-2013-0288 的情报信息

• 🔗 check if the file descriptor can be stored in the select() file descriptor set (r1781 from 0.8) - nss-pam-ldapd - NSS and PAM modules for lookups using LDAPx_refsource_CONFIRM
• 🔗 http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=f266f05f20afe73e89c3946a7bd60bd7c5948e1bx_refsource_CONFIRM
• 🔗 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0071x_refsource_CONFIRM
• 🔗 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0288x_refsource_MISC
• 🔗 #690319 - lookup fail to contact nslcd when first 1024 filedescriptor are already used (select) - Debian Bug report logsx_refsource_MISC
• 🔗 http://arthurdejong.org/git/nss-pam-ldapd/commit/?id=7867b93f9a7c76b96f1571cddc1de0811134bb81x_refsource_CONFIRM
• 🔗 http://www.securityfocus.com/bid/58007vdb-entryx_refsource_BID
• 🔗 http://secunia.com/advisories/52242third-party-advisoryx_refsource_SECUNIA
• 🔗 http://secunia.com/advisories/52212third-party-advisoryx_refsource_SECUNIA
• 🔗 http://www.debian.org/security/2012/dsa-2628vendor-advisoryx_refsource_DEBIAN
• 🔗 http://www.mandriva.com/security/advisories?name=MDVSA-2013:106vendor-advisoryx_refsource_MANDRIVA
• 🔗 RHSA-2013:0590 - Security Advisory - Red Hat Customer Portalvendor-advisoryx_refsource_REDHAT
• 🔗 http://lists.fedoraproject.org/pipermail/package-announce/2013-February/099438.htmlvendor-advisoryx_refsource_FEDORA
• 🔗 http://lists.opensuse.org/opensuse-updates/2013-03/msg00087.htmlvendor-advisoryx_refsource_SUSE
• 🔗 http://lists.opensuse.org/opensuse-updates/2013-03/msg00091.htmlvendor-advisoryx_refsource_SUSE
• 🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/82175vdb-entryx_refsource_XF
• 🔗 http://lists.arthurdejong.org/nss-pam-ldapd-announce/2013/msg00001.htmlmailing-listx_refsource_MLIST
• 🔗 oss-security - CVE-2013-0288 nss-pam-ldapd: FD_SET array index error, leading to stack-based buffer overflowmailing-listx_refsource_MLIST
• https://nvd.nist.gov/vuln/detail/CVE-2013-0288

新漏洞

四、漏洞 CVE-2013-0288 的评论