Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in setlocale in libc on NetBSD 1.4.x through 1.6, and possibly other operating systems, when called with the LC_ALL category, allows local attackers to execute arbitrary code via a user-controlled locale string that has more than 6 elements, which exceeds the boundaries of the new_categories category array, as exploitable through programs such as xterm and zsh.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NetBSD LibC SetLocale缓冲区溢出漏洞
Vulnerability Description
运行于NetBSD 1.4.x至1.6版本和可能其他操作系统的libc的setlocale存在缓冲区溢出漏洞。当调用LC_ALL类型时，本地用户可以借助超过6个元素的用户控制locale字符串执行任意代码，该字符串属于越界的new_categories类型数组，就像xterm和zsh程序中使用一样。
CVSS Information
N/A
Vulnerability Type
N/A