Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ETerm Home环境变量缓冲溢出漏洞
Vulnerability Description
Eterm是一个运行于Linux和Unix操作系统的免费、开放源码的终端模拟程序。它由Michael Jennings维护。 Eterm在处理HOME环境变量时存在一个缓冲溢出漏洞，允许本地用户获取sgid utmp属性。 Eterm在大多数系统上是以setgid utmp的属性安装的。当将环境变量$HOME设置为4128个字节长的字符串时，执行Eterm将产生缓冲溢出。本地用户可以用覆盖返回地址的方法转而执行自己的代码，而且得到utmp组的权限。
CVSS Information
N/A
Vulnerability Type
N/A