Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SGI IRIX InfoSearch CGI远程执行任意命令漏洞
Vulnerability Description
InfoSearch是SGI IRIX操作系统所带的CGI程序,用来查看在线图书,man页和发布消息。 软件包中的infosrch.cgi脚本实现上存在输入验证漏洞,远程攻击者可能利用此漏洞对在Web进程的权限在主机上执行任意命令。 infosrch.cgi脚本在将'fname'变量的传送给man2html程序前,它没有正确检查参数内容,远程攻击者可以在输入中混入SHELL转义字符比如";"从而在主机上执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A