Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerability in auto nice daemon (AND) 1.0.4 and earlier allows a local user to possibly execute arbitrary code via a process name containing a format string.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Auto Nice Daemon本地格式化字符串漏洞
Vulnerability Description
AND(Auto Nice Daemon)是一个守护程序，用来监视用户运行的进程。如果用户进程占用了过多的CPU时间，该守护程序就会改变这个用户进程。另外，该守护程序也会杀掉一些越级运行的用户程序。 该守护程序存在一个格式化字符串漏洞，可能导致本地攻击者提升权限。 该守护程序调用了syslog(3)函数，并且把进程名做为第二个参数。因此，只要精心构造一个包含格式化字符串的进程，就可能允许本地攻击者执行任意代码。由于该守护程序以root身份运行，因此攻击者将获得root权限。
CVSS Information
N/A
Vulnerability Type
N/A