Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP query string, or (2) a long tmpl parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SWSoft ASPSeek搜索引擎s.cgi远程溢出漏洞
Vulnerability Description
Aspseek搜索引擎是用C/C++开发的搜索引擎，使用MySQL数据库存储数据。 它所带的一个CGI程序:s.cgi中存在多个缓冲区溢出漏洞，攻击者可能远程执行任意代码。 有问题的代码部分如下： 1. c.cpp: int search(char *exe， char *arg) { ==> if ((env = getenv("QUERY_STRING"))) { strcpy(query_string， env); .... } <== } 这里query_string的定义为： query_str
CVSS Information
N/A
Vulnerability Type
N/A