BDU:2015-02891 (CVE-2010-0395)

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Опубликовано: 2015-04-28

Описание

Уязвимость пакета libuno-cli-cppuhelper1.0-cil офисного пакета OpenOffice связана с недостатком механизма контроля привилегий и средств управления доступом. Эксплуатация уязвимости позволяет нарушителю, действующему удаленно, получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

Затрагиваемое ПО и версии

Debian GNU/Linux (до 5)Astra Linux Common Edition (2.12 «Орёл»)OpenOffice (до 3.2.1)

Способ устранения

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 5:
ppc:
openoffice.org-math - 2.4.1+dfsg-1+lenny7
openoffice.org-evolution - 2.4.1+dfsg-1+lenny7
openoffice.org-officebean - 2.4.1+dfsg-1+lenny7
openoffice.org-impress - 2.4.1+dfsg-1+lenny7
openoffice.org-gnome - 2.4.1+dfsg-1+lenny7
openoffice.org - 2.4.1+dfsg-1+lenny7
python-uno - 2.4.1+dfsg-1+lenny7
openoffice.org-writer - 2.4.1+dfsg-1+lenny7
openoffice.org-draw - 2.4.1+dfsg-1+lenny7
openoffice.org-filter-binfilter - 2.4.1+dfsg-1+lenny7
openoffice.org-report-builder-bin - 2.4.1+dfsg-1+lenny7
mozilla-openoffice.org - 2.4.1+dfsg-1+lenny7
libmythes-dev - 2.4.1+dfsg-1+lenny7
ure-dbg - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-dbg - 2.4.1+dfsg-1+lenny7
openoffice.org-kde - 2.4.1+dfsg-1+lenny7
openoffice.org-headless - 2.4.1+dfsg-1+lenny7
openoffice.org-base - 2.4.1+dfsg-1+lenny7
openoffice.org-ogltrans - 2.4.1+dfsg-1+lenny7
openoffice.org-gtk - 2.4.1+dfsg-1+lenny7
openoffice.org-base-core - 2.4.1+dfsg-1+lenny7
openoffice.org-presentation-minimizer - 1.0+OOo2.4.1+dfsg-1+lenny7
openoffice.org-sdbc-postgresql - 0.7.6+OOo2.4.1+dfsg-1+lenny7
openoffice.org-dev - 2.4.1+dfsg-1+lenny7
ure - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-qa-tools - 2.4.1+dfsg-1+lenny7
openoffice.org-calc - 2.4.1+dfsg-1+lenny7
openoffice.org-core - 2.4.1+dfsg-1+lenny7
s390x:
ure - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-math - 2.4.1+dfsg-1+lenny7
openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-gcj - 2.4.1+dfsg-1+lenny7
openoffice.org-evolution - 2.4.1+dfsg-1+lenny7
openoffice.org-calc - 2.4.1+dfsg-1+lenny7
openoffice.org-dbg - 2.4.1+dfsg-1+lenny7
openoffice.org-core - 2.4.1+dfsg-1+lenny7
openoffice.org-dev - 2.4.1+dfsg-1+lenny7
ure-dbg - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-filter-binfilter - 2.4.1+dfsg-1+lenny7
openoffice.org-gnome - 2.4.1+dfsg-1+lenny7
openoffice.org-draw - 2.4.1+dfsg-1+lenny7
openoffice.org-officebean - 2.4.1+dfsg-1+lenny7
python-uno - 2.4.1+dfsg-1+lenny7
openoffice.org-writer - 2.4.1+dfsg-1+lenny7
openoffice.org-ogltrans - 2.4.1+dfsg-1+lenny7
openoffice.org-kde - 2.4.1+dfsg-1+lenny7
openoffice.org-presentation-minimizer - 1.0+OOo2.4.1+dfsg-1+lenny7
openoffice.org-base - 2.4.1+dfsg-1+lenny7
openoffice.org-gtk - 2.4.1+dfsg-1+lenny7
libmythes-dev - 2.4.1+dfsg-1+lenny7
mozilla-openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-qa-tools - 2.4.1+dfsg-1+lenny7
openoffice.org-sdbc-postgresql - 0.7.6+OOo2.4.1+dfsg-1+lenny7
openoffice.org-headless - 2.4.1+dfsg-1+lenny7
openoffice.org-impress - 2.4.1+dfsg-1+lenny7
openoffice.org-report-builder-bin - 2.4.1+dfsg-1+lenny7
openoffice.org-base-core - 2.4.1+dfsg-1+lenny7
i686:
openoffice.org-ogltrans - 2.4.1+dfsg-1+lenny7
openoffice.org-base-core - 2.4.1+dfsg-1+lenny7
mozilla-openoffice.org - 2.4.1+dfsg-1+lenny7
python-uno - 2.4.1+dfsg-1+lenny7
openoffice.org-draw - 2.4.1+dfsg-1+lenny7
openoffice.org-gnome - 2.4.1+dfsg-1+lenny7
openoffice.org-dev - 2.4.1+dfsg-1+lenny7
openoffice.org-impress - 2.4.1+dfsg-1+lenny7
openoffice.org-headless - 2.4.1+dfsg-1+lenny7
openoffice.org-report-builder-bin - 2.4.1+dfsg-1+lenny7
cli-uno-bridge - 2.4.1+dfsg-1+lenny7
ure-dbg - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-core - 2.4.1+dfsg-1+lenny7
openoffice.org-qa-tools - 2.4.1+dfsg-1+lenny7
openoffice.org-gtk - 2.4.1+dfsg-1+lenny7
openoffice.org-calc - 2.4.1+dfsg-1+lenny7
openoffice.org - 2.4.1+dfsg-1+lenny7
libmythes-dev - 2.4.1+dfsg-1+lenny7
ure - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-writer - 2.4.1+dfsg-1+lenny7
openoffice.org-filter-binfilter - 2.4.1+dfsg-1+lenny7
openoffice.org-evolution - 2.4.1+dfsg-1+lenny7
openoffice.org-kde - 2.4.1+dfsg-1+lenny7
openoffice.org-base - 2.4.1+dfsg-1+lenny7
openoffice.org-gcj - 2.4.1+dfsg-1+lenny7
openoffice.org-dbg - 2.4.1+dfsg-1+lenny7
openoffice.org-officebean - 2.4.1+dfsg-1+lenny7
openoffice.org-math - 2.4.1+dfsg-1+lenny7
openoffice.org-sdbc-postgresql - 0.7.6+OOo2.4.1+dfsg-1+lenny7
openoffice.org-presentation-minimizer - 1.0+OOo2.4.1+dfsg-1+lenny7
sparc:
openoffice.org-gcj - 2.4.1+dfsg-1+lenny7
openoffice.org-core - 2.4.1+dfsg-1+lenny7
openoffice.org-kde - 2.4.1+dfsg-1+lenny7
openoffice.org-gtk - 2.4.1+dfsg-1+lenny7
openoffice.org-evolution - 2.4.1+dfsg-1+lenny7
openoffice.org-writer - 2.4.1+dfsg-1+lenny7
openoffice.org-dbg - 2.4.1+dfsg-1+lenny7
openoffice.org-dev - 2.4.1+dfsg-1+lenny7
openoffice.org-qa-tools - 2.4.1+dfsg-1+lenny7
ure-dbg - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-officebean - 2.4.1+dfsg-1+lenny7
openoffice.org-gnome - 2.4.1+dfsg-1+lenny7
openoffice.org-report-builder-bin - 2.4.1+dfsg-1+lenny7
openoffice.org-impress - 2.4.1+dfsg-1+lenny7
openoffice.org-math - 2.4.1+dfsg-1+lenny7
mozilla-openoffice.org - 2.4.1+dfsg-1+lenny7
python-uno - 2.4.1+dfsg-1+lenny7
openoffice.org-draw - 2.4.1+dfsg-1+lenny7
ure - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-base-core - 2.4.1+dfsg-1+lenny7
openoffice.org-presentation-minimizer - 1.0+OOo2.4.1+dfsg-1+lenny7
openoffice.org-calc - 2.4.1+dfsg-1+lenny7
openoffice.org-filter-binfilter - 2.4.1+dfsg-1+lenny7
cli-uno-bridge - 2.4.1+dfsg-1+lenny7
openoffice.org-sdbc-postgresql - 0.7.6+OOo2.4.1+dfsg-1+lenny7
libmythes-dev - 2.4.1+dfsg-1+lenny7
openoffice.org-base - 2.4.1+dfsg-1+lenny7
openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-ogltrans - 2.4.1+dfsg-1+lenny7
openoffice.org-headless - 2.4.1+dfsg-1+lenny7
x86-64:
openoffice.org-headless - 2.4.1+dfsg-1+lenny7
openoffice.org-gtk - 2.4.1+dfsg-1+lenny7
openoffice.org-gnome - 2.4.1+dfsg-1+lenny7
openoffice.org-impress - 2.4.1+dfsg-1+lenny7
openoffice.org-core - 2.4.1+dfsg-1+lenny7
openoffice.org-sdbc-postgresql - 0.7.6+OOo2.4.1+dfsg-1+lenny7
mozilla-openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-report-builder-bin - 2.4.1+dfsg-1+lenny7
openoffice.org-presentation-minimizer - 1.0+OOo2.4.1+dfsg-1+lenny7
openoffice.org-base-core - 2.4.1+dfsg-1+lenny7
openoffice.org-qa-tools - 2.4.1+dfsg-1+lenny7
cli-uno-bridge - 2.4.1+dfsg-1+lenny7
openoffice.org-writer - 2.4.1+dfsg-1+lenny7
ure - 1.4+OOo2.4.1+dfsg-1+lenny7
python-uno - 2.4.1+dfsg-1+lenny7
openoffice.org-base - 2.4.1+dfsg-1+lenny7
ure-dbg - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org - 2.4.1+dfsg-1+lenny7
libmythes-dev - 2.4.1+dfsg-1+lenny7
openoffice.org-draw - 2.4.1+dfsg-1+lenny7
openoffice.org-evolution - 2.4.1+dfsg-1+lenny7
openoffice.org-filter-binfilter - 2.4.1+dfsg-1+lenny7
openoffice.org-gcj - 2.4.1+dfsg-1+lenny7
openoffice.org-dev - 2.4.1+dfsg-1+lenny7
openoffice.org-kde - 2.4.1+dfsg-1+lenny7
openoffice.org-officebean - 2.4.1+dfsg-1+lenny7
openoffice.org-dbg - 2.4.1+dfsg-1+lenny7
openoffice.org-calc - 2.4.1+dfsg-1+lenny7
openoffice.org-math - 2.4.1+dfsg-1+lenny7
armel:
python-uno - 2.4.1+dfsg-1+lenny7
openoffice.org-gnome - 2.4.1+dfsg-1+lenny7
openoffice.org-headless - 2.4.1+dfsg-1+lenny7
openoffice.org-report-builder-bin - 2.4.1+dfsg-1+lenny7
openoffice.org-base-core - 2.4.1+dfsg-1+lenny7
openoffice.org-dbg - 2.4.1+dfsg-1+lenny7
openoffice.org-math - 2.4.1+dfsg-1+lenny7
openoffice.org-draw - 2.4.1+dfsg-1+lenny7
ure - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-writer - 2.4.1+dfsg-1+lenny7
openoffice.org-gtk - 2.4.1+dfsg-1+lenny7
openoffice.org-core - 2.4.1+dfsg-1+lenny7
libmythes-dev - 2.4.1+dfsg-1+lenny7
ure-dbg - 1.4+OOo2.4.1+dfsg-1+lenny7
mozilla-openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-qa-tools - 2.4.1+dfsg-1+lenny7
openoffice.org-sdbc-postgresql - 0.7.6+OOo2.4.1+dfsg-1+lenny7
openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-presentation-minimizer - 1.0+OOo2.4.1+dfsg-1+lenny7
openoffice.org-impress - 2.4.1+dfsg-1+lenny7
openoffice.org-calc - 2.4.1+dfsg-1+lenny7
openoffice.org-officebean - 2.4.1+dfsg-1+lenny7
openoffice.org-evolution - 2.4.1+dfsg-1+lenny7
openoffice.org-gcj - 2.4.1+dfsg-1+lenny7
openoffice.org-base - 2.4.1+dfsg-1+lenny7
openoffice.org-dev - 2.4.1+dfsg-1+lenny7
openoffice.org-kde - 2.4.1+dfsg-1+lenny7
ia64:
openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-gcj - 2.4.1+dfsg-1+lenny7
openoffice.org-impress - 2.4.1+dfsg-1+lenny7
openoffice.org-base - 2.4.1+dfsg-1+lenny7
openoffice.org-calc - 2.4.1+dfsg-1+lenny7
openoffice.org-evolution - 2.4.1+dfsg-1+lenny7
openoffice.org-sdbc-postgresql - 0.7.6+OOo2.4.1+dfsg-1+lenny7
openoffice.org-headless - 2.4.1+dfsg-1+lenny7
openoffice.org-presentation-minimizer - 1.0+OOo2.4.1+dfsg-1+lenny7
openoffice.org-gnome - 2.4.1+dfsg-1+lenny7
openoffice.org-kde - 2.4.1+dfsg-1+lenny7
openoffice.org-gtk - 2.4.1+dfsg-1+lenny7
ure - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-math - 2.4.1+dfsg-1+lenny7
openoffice.org-report-builder-bin - 2.4.1+dfsg-1+lenny7
ure-dbg - 1.4+OOo2.4.1+dfsg-1+lenny7
libmythes-dev - 2.4.1+dfsg-1+lenny7
mozilla-openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-dbg - 2.4.1+dfsg-1+lenny7
openoffice.org-officebean - 2.4.1+dfsg-1+lenny7
openoffice.org-writer - 2.4.1+dfsg-1+lenny7
python-uno - 2.4.1+dfsg-1+lenny7
openoffice.org-dev - 2.4.1+dfsg-1+lenny7
openoffice.org-core - 2.4.1+dfsg-1+lenny7
openoffice.org-draw - 2.4.1+dfsg-1+lenny7
openoffice.org-filter-binfilter - 2.4.1+dfsg-1+lenny7
cli-uno-bridge - 2.4.1+dfsg-1+lenny7
openoffice.org-base-core - 2.4.1+dfsg-1+lenny7
mips:
openoffice.org-gcj - 2.4.1+dfsg-1+lenny7
openoffice.org-dbg - 2.4.1+dfsg-1+lenny7
openoffice.org-calc - 2.4.1+dfsg-1+lenny7
openoffice.org-math - 2.4.1+dfsg-1+lenny7
ure-dbg - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-core - 2.4.1+dfsg-1+lenny7
openoffice.org-draw - 2.4.1+dfsg-1+lenny7
openoffice.org-headless - 2.4.1+dfsg-1+lenny7
python-uno - 2.4.1+dfsg-1+lenny7
openoffice.org-filter-binfilter - 2.4.1+dfsg-1+lenny7
openoffice.org-sdbc-postgresql - 0.7.6+OOo2.4.1+dfsg-1+lenny7
openoffice.org-writer - 2.4.1+dfsg-1+lenny7
openoffice.org-officebean - 2.4.1+dfsg-1+lenny7
ure - 1.4+OOo2.4.1+dfsg-1+lenny7
openoffice.org-gnome - 2.4.1+dfsg-1+lenny7
openoffice.org-dev - 2.4.1+dfsg-1+lenny7
openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-kde - 2.4.1+dfsg-1+lenny7
openoffice.org-evolution - 2.4.1+dfsg-1+lenny7
libmythes-dev - 2.4.1+dfsg-1+lenny7
openoffice.org-impress - 2.4.1+dfsg-1+lenny7
openoffice.org-base-core - 2.4.1+dfsg-1+lenny7
openoffice.org-base - 2.4.1+dfsg-1+lenny7
openoffice.org-presentation-minimizer - 1.0+OOo2.4.1+dfsg-1+lenny7
openoffice.org-qa-tools - 2.4.1+dfsg-1+lenny7
openoffice.org-gtk - 2.4.1+dfsg-1+lenny7
mozilla-openoffice.org - 2.4.1+dfsg-1+lenny7
openoffice.org-report-builder-bin - 2.4.1+dfsg-1+lenny7
noarch:
openoffice.org-l10n-ts - 2.4.1+dfsg-1+lenny7
openoffice.org-l10n-za - 2.4.1+dfsg-1+lenny7
openoffice.org-l10n-as-in - 2.4.1+dfsg-1+lenny7
openoffice.org-l10n-be-by - 2.4.1+dfsg-1+lenny7
openoffice.org-l10n-or-in - 2.4.1+dfsg-1+lenny7
openoffice.org-l10n-ne - 2.4.1+dfsg-1+lenny7
openoffice.org-l10n-nb - 2.4.1+dfsg-1+lenny7
openoffice.org-help-ko - 2.4.1+dfsg-1+lenny7
openoffice.org-report-builder - 1.0.2+OOo2.4.1+dfsg-1+lenny7
openoffice.org-l10n-cy - 2.4.1+dfsg-1+lenny7
openoffice.org-style-crystal - 2.4.1+dfsg-1+lenny7
openoffice.org-help-da - 2.4.1+dfsg-1+lenny7
openoffice.org-help-eu - 2.4.1+dfsg-1+lenn

Для OpenOffice:
Обновление программного обеспечения до 3.2.1 или более поздней версии

Для Astra Linux:
Обновление программного обеспечения (пакета openoffice) до 3.2.1 или более поздней версии

Оценка CVSS

Балл	9.3 — высокая опасность

Источники и патчи

http://www.debian.org/security/dsa-2055/http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0395 https://nvd.nist.gov/vuln/detail/CVE-2010-0395 https://security-tracker.debian.org/tracker/CVE-2010-0395

Проверьте безопасность своего сайта и почты → Полная проверка домена