Linux Kernel chown()系统调用组属性更改漏洞
发布日期： 2004年7月9日
受影响系统：
Linux kernel 2.6.6
Linux kernel 2.6.5
- SuSE Linux 9.1
描述：
--------------------------------------------------------------------------------
BUGTRAQ ID: 10662
CVE(CAN) ID: CAN-2004-0497
Linux是一款开放源代码操作系统。
Linux Kernel存在一个缺陷，本地或远程安全者可以利用这个漏洞不正确更改任意文件的组属主。
在审核Linux内核过程中，SUSE发现一个缺陷允许用户未授权更改文件组ID，在Red Hat Enterprise
Linux包含2.4版内核，只有通过Kernel nfs服务器上才能触发此问题，在系统上的用户可以从有此漏洞的机器上挂接远程文件系统，并能未授权更改导出文件的组ID。
<*来源：Michael Schroeder
Ruediger Oertel
链接：http://rhn.redhat.com/errata/RHSA-2004-360.html
http://www.securityfocus.com/advisories/6911
*>
建议：
--------------------------------------------------------------------------------
厂商补丁：
RedHat
------
RedHat已经为此发布了一个安全公告（RHSA-2004:360-05）以及相应补丁:
RHSA-2004:360-05：Updated kernel packages fix security vulnerabilities
链接：http://rhn.redhat.com/errata/RHSA-2004-360.html
补丁下载：
Linux kernel 2.6.6:
RedHat Upgrade kernel-2.6.6-1.435.2.3.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
RedHat Fedora Core 2
RedHat Upgrade kernel-smp-2.6.6-1.435.2.3.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
RedHat Fedora Core 2
RedHat Upgrade kernel-debuginfo-2.6.6-1.435.2.3.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
RedHat Fedora Core 2
RedHat Upgrade kernel-sourcecode-2.6.6-1.435.2.3.noarch.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
RedHat Fedora Core 2
RedHat Upgrade kernel-doc-2.6.6-1.435.2.3.noarch.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
RedHat Fedora Core 2
RedHat Upgrade kernel-2.6.6-1.435.2.3.i586.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
RedHat Fedora Core 2
RedHat Upgrade kernel-smp-2.6.6-1.435.2.3.i586.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
RedHat Fedora Core 2
RedHat Upgrade kernel-debuginfo-2.6.6-1.435.2.3.i586.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
RedHat Fedora Core 2
RedHat Upgrade kernel-2.6.6-1.435.2.3.i686.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
RedHat Fedora Core 2
RedHat Upgrade kernel-smp-2.6.6-1.435.2.3.i686.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
RedHat Fedora Core 2
RedHat Upgrade kernel-debuginfo-2.6.6-1.435.2.3.i686.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
RedHat Fedora Core 2
RedHat Upgrade kernel-sourcecode-2.6.6-1.435.2.3.noarch.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
RedHat Fedora Core 2
RedHat Upgrade kernel-doc-2.6.6-1.435.2.3.noarch.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
RedHat Fedora Core 2
RedHat Fedora Core1:
RedHat Upgrade kernel-2.4.22-1.2197.nptl.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
RedHat Upgrade kernel-smp-2.4.22-1.2197.nptl.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
RedHat Upgrade kernel-debuginfo-2.4.22-1.2197.nptl.x86_64.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
RedHat Upgrade kernel-BOOT-2.4.22-1.2197.nptl.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
RedHat Upgrade kernel-debuginfo-2.4.22-1.2197.nptl.i386.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
RedHat Upgrade kernel-2.4.22-1.2197.nptl.i586.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
RedHat Upgrade kernel-smp-2.4.22-1.2197.nptl.i586.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
RedHat Upgrade kernel-debuginfo-2.4.22-1.2197.nptl.i586.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
RedHat Upgrade kernel-2.4.22-1.2197.nptl.i686.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
RedHat Upgrade kernel-smp-2.4.22-1.2197.nptl.i686.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
RedHat Upgrade kernel-2.4.22-1.2197.nptl.athlon.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
RedHat Upgrade kernel-smp-2.4.22-1.2197.nptl.athlon.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
RedHat Upgrade kernel-debuginfo-2.4.22-1.2197.nptl.athlon.rpm
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
RedHat Fedora Core 1
S.u.S.E.
--------
S.u.S.E.已经为此发布了一个安全公告（SUSE-SA:2004:020）以及相应补丁:
SUSE-SA:2004:020：kernel
链接：http://www.securityfocus.com/advisories/6911
补丁下载：
Linux kernel 2.6.5:
SuSE Upgrade kernel-default-2.6.5-7.95.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-default-2.6.5-7.95.i586.rpm
x86 Platform
SuSE Upgrade kernel-smp-2.6.5-7.95.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-smp-2.6.5-7.95.i586.rpm
x86 Platform
SuSE Upgrade kernel-bigsmp-2.6.5-7.95.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-bigsmp-2.6.5-7.95.i586.rpm
x86 Platform
SuSE Upgrade kernel-bigsmp-2.6.5-7.95.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-bigsmp-2.6.5-7.95.i586.rpm
x86 Platform
SuSE Upgrade kernel-source-2.6.5-7.95.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-source-2.6.5-7.95.i586.rpm
x86 Platform
SuSE Upgrade kernel-default-2.6.5-7.95.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-default-2.6.5-7.95.x86_64.rpm
x86-64 Platform
SuSE Upgrade kernel-smp-2.6.5-7.95.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-smp-2.6.5-7.95.x86_64.rpm
x86-64 Platform
SuSE Upgrade kernel-source-2.6.5-7.95.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-source-2.6.5-7.95.x86_64.rpm
x86-64 Platform