Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CFingerD 缓冲区溢出漏洞
Vulnerability Description
CVE(CAN) ID: CAN-2001-0735 cfingerd 一个安全的finger守护程序。它由cfingerd开发小组维护。 它被发现存在一个缓冲区溢出漏洞。由于没有检查用户提供数据的长度，如果用户提供的 数据长度超过80字节，就可能使一个内部缓冲区发生溢出，攻击者可能改变程序执行流程， 并执行任意代码。 问题在util.c第181－182行附近： ... while((line[pos] != ' ') && (!done)) { command[newpos] = line[pos];
CVSS Information
N/A
Vulnerability Type
N/A