Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerability in Foundstone FScan 1.12 with banner grabbing enabled allows remote attackers to execute arbitrary code on the scanning system via format string specifiers in the server banner.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Foundstone FScan banner获取功能存在格式化串漏洞
Vulnerability Description
FScan是一款由Foundstone公开分发和维护的商业化网络扫描程序，可运行在Microsoft Windows操作系统下。 FScan在处理banner数据时存在漏洞，可导致攻击者进行格式化串攻击，以Fscan进程的权限在执行扫描任务的主机上执行任意指令。 当FScan中的banner获取功能开启时，会直接打印banner字符串，攻击者可以构建恶意的WEB站点，并提供带有格式化串的banner信息，当FScan对系统进行扫描时，就可能导致产生格式化串攻击，可能以FScan进程的权限在目标系统上执行任
CVSS Information
N/A
Vulnerability Type
N/A