Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache htpasswd 和 htdigest 后置链接漏洞
Vulnerability Description
htpasswd和htdigest都是美国阿帕奇(Apache)软件基金会的产品。htpasswd是一款Linux密码生成软件。用来创建和更新用于基本认证的用户认证密码文件。htdigest是Apache的Web服务器内置工具.用于创建和更新储存用户名、域和用于摘要认证的密码文件。 Apache 2.0a9,1.3.14,和其他版本的htpasswd和htdigest存在漏洞。本地用户借助符号链接攻击改写任意文件。
CVSS Information
N/A
Vulnerability Type
N/A