Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the vpnclient program for UNIX VPN Client before 3.5.2 allows local users to gain administrative privileges via a long profile name in a connect argument.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Unix下的Cisco VPN客户端本地缓冲区溢出漏洞
Vulnerability Description
Cisco VPN客户端用于在客户端机器和CISCO VPN集中器之间建立VPN连接。 Cisco VPN客户端在处理参数时缺少充分检查，本地攻击者可以利用这个漏洞进行缓冲区溢出攻击。 Cisco VPN客户端默认在系统中以suid root属性安装，程序对用户提交给"connect"参数的数据缺少正确充分的检查，攻击者可以提交超长的档案文件名(超过520字节)给"connect"参数就可以造成缓冲区溢出，精心构建档案文件名数据就可能以root权限在系统中执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A