CVE-2004-2687

描述

distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks.

如何修補 CVE-2004-2687

要修補 CVE-2004-2687,請將受影響套件升級到下列已修補版本。

• Debian/distcc—升級至 2.18.1-1 或更新版本

CVE-2004-2687 正在被利用嗎?

可能 — EPSS 為 81.0%,屬於高被利用機率區間,建議優先修補。

受影響套件(1)

• from 0, < 2.18.1-1

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2004-2687