Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Vulnerability in FTPSRVR in HP MPE/iX 6.0 through 7.0 does not properly validate certain FTP commands, which allows attackers to gain privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HP MPE/iX FTPSRVR任意SHELL命令执行漏洞
Vulnerability Description
MPE/iX是一款惠普公司开发和维护的适合在HP E3000级服务器上使用的Internet集成操作系统。 MPE/iX系统中的FTP服务对用户输入缺少正确充分的检查,可以导致远程攻击者以FTP进程的权限在目标系统上执行任意命令。 由于MPE/iX系统对FTP用户输入(包括匿名用户)数据处理缺少正确的检查,攻击者可以通过构建嵌入任意命令的字符串作为参数提交给LIST命令,导致以FTP进程的权限在目标系统上执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A