Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多家厂商gethostbyname()函数实现远程缓冲区溢出漏洞
Vulnerability Description
gethostbyname()是用于通过主机名获得网络地址的函数,使用在多种操作系统下。 gethostbyname函数把数据拷贝到本地内存缓冲区时缺少正确边界缓冲检查,本地或远程攻击者可以利用这个漏洞进行缓冲区溢出攻击,可能以使用此函数的运行程序权限在系统上执行任意指令。 当UNIX系统上的程序要查询主机名和获得它的网络地址,一般程序使用"gethostbyname()"库函数来解析。这个函数从域名系统中获得主机名作为参数,并返回主机地址给程序,由于对输入参数缺少正确的边界缓冲区检查,如果攻击者提供的超
CVSS Information
N/A
Vulnerability Type
N/A