Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities (1) linux-ftpd, (2) pcnfsd, (3) tftp, (4) traceroute, or (5) from/to.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Debian GNU/Linux netstd工具包多个程序远程缓冲区溢出漏洞
Vulnerability Description
netstd工具包集合Debian GNU/Linux系统下一套网络工具和守护程序。 netstd工具包中多个工具存在缓冲区溢出，可导致远程攻击者以运行工具的进程在目标系统上执行任意命令。 netstd工具包中的下列程序存在漏洞： - linux-ftpd - pcnfsd - tftp - traceroute - from/to 这些程序在处理解析主机名操作时，直接把回复得到的FQDN值拷贝到固定的缓冲区中，攻击者可以伪造DNS服务器信息，精心构建FQDN值可导致以运行工具的进程的权限在目标系统上执行
CVSS Information
N/A
Vulnerability Type
N/A