Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WatchGuard Firebox VClass CLI远程格式串溢出漏洞
Vulnerability Description
WatchGuard Firebox VClass是美国WatchGuard公司的一套防火墙安全软件。 Firebox VClass的CLI接口对用户提供的密码数据缺少正确检查，远程攻击者可以利用这个漏洞进行格式串溢出攻击。 Firebox VClass的CLI(命令行借口)程序对用户提供的密码数据缺少检查，远程攻击者可以提交包含恶意格式字符串的数据作为密码发送给Vclass的CLI，可导致覆盖内存任意地址，精心构建提交数据可能以管理员权限在系统上执行任意指令。不过没有得到证实。
CVSS Information
N/A
Vulnerability Type
N/A