Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
C-Note Squid_Auth_LDAP Pam logging函数远程格式串溢出漏洞
Vulnerability Description
Squid_Auth_LDAP是一款免费开放源代码的验证模块，由C-note分发和维护，可使用于Linux操作系统下。 Squid_Auth_LDAP存在设计问题，可导致远程攻击者进行格式串溢出攻击，以使用Squid_Auth_LDAP模块进程的权限在目标系统中执行任意指令。由于在Squid_Auth_LDAP模块中程序不安全地调用了logging()函数，攻击者可以连接系统并提供精心构建的格式串，溢出攻击覆盖内存任意位置，并以调用Squid_Auth_LDAP模块进程的权限在目标系统中执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A