Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HP-UX NLSPATH环境变量权限提升漏洞
Vulnerability Description
HP－UX 中的很多程序都使用libc库中的catopen()/catgets()等函数来显示本地化的信息。catopen()函数在检测到NLSPATH环境变量之后，会打开其指定的文件并从中读取消息。 然而，catopen()函数并没有对suid root程序使用NLSPATH变量进行限制，这允许本地攻击者通过设置NLSPATH变量指定自己构造的locale文件，当suid root程序将使用catopen()打开该消息文件并将其中的数据传递给*printf()函数时，就可能造成格式串漏洞。 任何使用ca
CVSS Information
N/A
Vulnerability Type
N/A