发布日期：2003-08-12
更新日期：2003-08-15

受影响系统：
Leon J Breedt pam-pgsql 0.5.1
    - FreeBSD 4.4
Leon J Breedt pam-pgsql 0.5.2
    - Debian Linux 3.0

描述：
pam-pgsql是一款用于PostgreSQL数据库接口的PAM认证模块。

pam-pgsql不正确处理用户提交的用户名，当记录消息时可导致发生格式字符串问题。

攻击者提交恶意格式字符串作为用户名给使用PAM验证的程式(如HTTP、SSH、telnet)，用户名在随后的pam-pqsql记录日志的过程中会发生格式串处理问题，导致进程内存中的敏感信息被破坏 ，精心构建提交数据可能以使用PAM验证的进程权限在系统上执行任意指令。

<*来源：Debian Security Advisory
 
  链接：http://www.debian.org/security/2002/dsa-370
*>

厂商补丁：Debian
Debian已为此发布了一个安全公告（DSA-370-1）连同相应补丁:
DSA-370-1：New pam-pgsql packages fix format string vulnerability
链接：http://www.debian.org/security/2002/dsa-370

补丁下载：

Source archives:

http://security.debian.org/pool/updates/main/p/pam-pgsql/pam-pgsql_0.5.2-3woody1.dsc
Size/MD5 checksum:      644 01ce86abcdc3a432fc979e1b0f0203a2
http://security.debian.org/pool/updates/main/p/pam-pgsql/pam-pgsql_0.5.2-3woody1.diff.gz
Size/MD5 checksum:     5008 b2be8320b3d2a468b3a5af0fa8bf9e1b
http://security.debian.org/pool/updates/main/p/pam-pgsql/pam-pgsql_0.5.2.orig.tar.gz
Size/MD5 checksum:    39892 3ee046cd64ad9c3e02ad486d0398ad13

Alpha architecture:

http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_0.5.2-3woody1_alpha.deb
Size/MD5 checksum:    15226 c10f5e09cd23810c2418fccfe42414ef

ARM architecture:

http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_0.5.2-3woody1_arm.deb
Size/MD5 checksum:    13602 bf8f9d8244b36ded089b615f2e76d285

Intel IA-32 architecture:

http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_0.5.2-3woody1_i386.deb
Size/MD5 checksum:    13450 b68edd005607062670d4e1280025f27c

Intel IA-64 architecture:

http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_0.5.2-3woody1_ia64.deb
Size/MD5 checksum:    20280 3d755ff713654155613eb28c1fa39077

HP Precision architecture:

http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_0.5.2-3woody1_hppa.deb
Size/MD5 checksum:    14154 7a7ddbd447a3c6470ec281d4ec8a0181

Motorola 680x0 architecture:

http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_0.5.2-3woody1_m68k.deb
Size/MD5 checksum:    13598 db5d0f4711bcae1770230cf026ba0d91

Big endian MIPS architecture:

http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_0.5.2-3woody1_mips.deb
Size/MD5 checksum:    13338 a18e7309983872fec63dc363de4ee97d

Little endian MIPS architecture:

http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_0.5.2-3woody1_mipsel.deb
Size/MD5 checksum:    13354 07b3deb8d49d04d853311746a26b19f4

PowerPC architecture:

http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_0.5.2-3woody1_powerpc.deb
Size/MD5 checksum:    13728 11b9ebcaa2e744acce12e844c59ea893

IBM S/390 architecture:

http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_0.5.2-3woody1_s390.deb
Size/MD5 checksum:    13908 6b285c2dfa13c138155559a92b24e3b1

Sun Sparc architecture:

http://security.debian.org/pool/updates/main/p/pam-pgsql/libpam-pgsql_0.5.2-3woody1_sparc.deb
Size/MD5 checksum:    13556 eb37c53e7fc2084b6883f1c563d6ff92

补丁安装方法：

1. 手工安装补丁包：

  首先，使用下面的命令来下载补丁软件：
  # wget url  (url是补丁下载链接地址)

  然后，使用下面的命令来安装补丁： 
  # dpkg -i file.deb (file是相应的补丁名)

2. 使用apt-get自动安装补丁包：

   首先，使用下面的命令更新内部数据库：
   # apt-get update
  
   然后，使用下面的命令安装更新软件包：
   # apt-get upgrade