首页 > 其他 > 详细

RHEL4 glibc幽灵漏洞检测及修复方案

时间:2015-02-07 02:17:19      阅读:909      评论:0      收藏:0      [点我收藏+]

一、检测glibc漏洞
   1、# wget https://webshare.uchicago.edu/orgs/ITServices/itsec/Downloads/GHOST.c
    2、# gcc -o GHOST GHOST.c   
    3、#./GHOST
vulnerable   //存在glibc漏洞


二、下载glibc升级包:
 wget http://public-yum.oracle.com/repo/EnterpriseLinux/EL4/latest/i386/getPackage/glibc-2.3.4-2.57.0.1.el4.1.i386.rpm
wget http://public-yum.oracle.com/repo/EnterpriseLinux/EL4/latest/i386/getPackage/glibc-2.3.4-2.57.0.1.el4.1.i686.rpm
wget http://public-yum.oracle.com/repo/EnterpriseLinux/EL4/latest/i386/getPackage/glibc-common-2.3.4-2.57.0.1.el4.1.i386.rpm
wget http://public-yum.oracle.com/repo/EnterpriseLinux/EL4/latest/i386/getPackage/glibc-devel-2.3.4-2.57.0.1.el4.1.i386.rpm
wget http://public-yum.oracle.com/repo/EnterpriseLinux/EL4/latest/i386/getPackage/glibc-headers-2.3.4-2.57.0.1.el4.1.i386.rpm
wget http://public-yum.oracle.com/repo/EnterpriseLinux/EL4/latest/i386/getPackage/glibc-profile-2.3.4-2.57.0.1.el4.1.i386.rpm
wget http://public-yum.oracle.com/repo/EnterpriseLinux/EL4/latest/i386/getPackage/glibc-utils-2.3.4-2.57.0.1.el4.1.i386.rpm
wget http://public-yum.oracle.com/repo/EnterpriseLinux/EL4/latest/i386/getPackage/nscd-2.3.4-2.57.0.1.el4.1.i386.rpm


三、升级glibc软件包:
# rpm -Fvh *.rpm
warning: glibc-2.3.4-2.57.0.1.el4.1.i386.rpm: V3 DSA signature: NOKEY, key ID b38a8516
warning: package glibc = 2.3.4-2.57.0.1.el4.1 was already added, replacing with glibc <= 2.3.4-2.57.0.1.el4.1
Preparing...                ########################################### [100%]
   1:glibc-common           ########################################### [ 20%]
   2:glibc                  ########################################### [ 40%]
Stopping sshd:[  OK  ]
Starting sshd:[  OK  ]
   3:glibc-headers          ########################################### [ 60%]
   4:glibc-devel            ########################################### [ 80%]
   5:nscd                   ########################################### [100%]

四、重启操作系统 

# reboot

五、检测glibc漏洞
# ./GHOST

not vulnerable  //已经不存在glibc幽灵漏洞


RHEL4 glibc幽灵漏洞检测及修复方案

原文:http://blog.chinaunix.net/uid-7270462-id-4815638.html

(0)
(0)
   
举报
评论 一句话评论(0
关于我们 - 联系我们 - 留言反馈 - 联系我们:wmxa8@hotmail.com
© 2014 bubuko.com 版权所有
打开技术之扣,分享程序人生!