Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utility program, which allows local users to gain privileges by modifying the PATH to point to a Trojan horse program.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jetico BestCrypt bctool特权提升漏洞
Vulnerability Description
Jetico BestCrypt 0.7版本及之前版本中bctool信任用户提供的PATH来发现并且执行fsck应用程序,本地用户可以通过修改到Trojan木马程序端口的PATH来提升特权。
CVSS Information
N/A
Vulnerability Type
N/A