Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13 and earlier may allow remote attackers to execute arbitrary code via long authentication data.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
libgtop_daemon远程格式化字符串漏洞
Vulnerability Description
libgtop_daemon是GNOME的一个守护程序，用来监视服务器上运行的进程。 该守护程序存在一个格式串漏洞，可能导致远程攻击者以普通用户的权限在主机上执行任意指令。 该守护程序的两个函数syslog_message()和syslog_io_message()调用了格式化字符串，而这些格式化字符串是由客户端初始化的。因此，通过精心构造一个特殊的格式化字符串，可能允许远程攻击者执行任意代码。由于该守护程序以nobody身份运行，因此攻击者将获得nobody权限。
CVSS Information
N/A
Vulnerability Type
N/A