Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Legato Networker before 6.1 allows remote attackers to bypass access restrictions and gain privileges on the Networker interface by spoofing the admin server name and IP address and connecting to Networker from an IP address whose hostname can not be determined by a DNS reverse lookup.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Legato NetWorker反向DNS解析认证漏洞
Vulnerability Description
CVE(CAN) ID: CAN-2001-0910 Legato NetWorker是一个用来帮助分享数据和备份的服务器软件包。 Legato NetWorker服务器对客户机的认证存在一个漏洞，允许攻击者使用任何不能反向 解析域名的IP地址，来取得到服务器的非法访问。 问题在于，当客户机连接服务器时，客户机向服务器提交自己的IP地址，域名，用户名和 用户组名。作为认证的一个步骤，服务器试图对客户提交上来的IP地址进行反向解析，当 解析失败时，服务器只返回一个"unknown host"的信息，却不中断
CVSS Information
N/A
Vulnerability Type
N/A