Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
tac_plus Tacacs+ daemon F4.0.4.alpha, originally maintained by Cisco, creates files from the accounting directive with world-readable and writable permissions, which allows local users to access and modify sensitive files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Tac_Plus以不安全的权限创建记帐文件漏洞
Vulnerability Description
tac_plus是一个开源，可免费使用的TACACS+认证服务器程序的实现，最初由Cisco公司发布。 tac_plus在创建文件时存在漏洞，本地攻击者可以任意操纵tac_plus创建的文件。 tac_plus启动以后，它会以全局可读写的权限创建"account file ="参数指定的文件，这使本地攻击者可以操纵文件的内容，或者完全删除此记帐文件。
CVSS Information
N/A
Vulnerability Type
N/A