Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerability in PerlRTE_example1.pl in WASD 7.1, 7.2.0 through 7.2.3, and 8.0.0 allows remote attackers to execute arbitrary commands or crash the server via format strings in the $name variable.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenVMS WASD HTTP服务程序多个远程漏洞
Vulnerability Description
WASD VMS超文本服务是一款使用在OpenVMS系统上流行的HTTP服务程序。 WASD HTTP服务程序存在多个漏洞,远程攻击者可以利用这些漏洞进行访问系统文件,获得系统敏感信息,以SYSTEM权限执行任意指令等攻击。 * 默认情况下"Tree"内部脚本允许生成目录树,通过提交 http://webserver/tree/ 请求,可以获得整个目录树。提交统配符'*.*'可导致获得全部文件信息。 (相关文档:http://wasd.vsm.com.au/ht_root/doc/env/env_0400
CVSS Information
N/A
Vulnerability Type
N/A