Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple CGI scripts in CIDER SHADOW 1.5 and 1.6 allows remote attackers to execute arbitrary commands via certain form fields.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CIDER SHADOW远程可执行任意命令漏洞
Vulnerability Description
CIDER SHADOW是一款NSWC开发和维护的入侵检测程序，可以使用在多种Unix和Linux操作系统下。 CIDER SHADOW中多个CGI脚本对用户提交的数据缺少充分正确的检查，可导致远程攻击者以httpd进程的权限在主机上执行任意命令。 由于CIDER SHADOW脚本对攻击者提供给变量的数据缺少正确检查，远程攻击者可以构建特殊的URL并提交给CIDER SHADOW，导致其以httpd进程的权限在目标系统执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A