Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in Webalizer 2.01-06, when configured to use reverse DNS lookups, allows remote attackers to execute arbitrary code by connecting to the monitored web server from an IP address that resolves to a long hostname.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Bradford Barrett Webalizer反向解析DNS查询缓冲区溢出漏洞
Vulnerability Description
Webalizer是一款WEB服务日志文件分析程序,可产生WEB站点的静态日志的统计信息,日志分析可产生包括参考信息、浏览信息、WEB站点点击、文件访问等信息。这些日志文件以HTML格式生成,所以管理员可以通过WEB浏览器查看文件。 Webalizer在反向解析DNS查询处理中存在问题,可导致产生缓冲区溢出攻击。 如果Webalizer启用执行反向解析DNS查询功能(默认是关闭的),由于反向解析代码中存在问题,可导致攻击者构建特殊恶意的DNS响应而触发Webalizer产生缓冲区溢出,可导致攻击者以Web
CVSS Information
N/A
Vulnerability Type
N/A