Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pam_SMB远程缓冲区溢出漏洞
Vulnerability Description
pam_smb是一款使用SMB服务器上的用于验证用户的验证模块。 pam_smb模块的login.c存在远程缓冲区溢出问题,远程攻击者可以利用这个漏洞以模块进程权限在系统上执行任意指令。 攻击者如果提供超长的密码,pam_smb模块解析时就会导致触发缓冲区溢出,精心构建提交上可以以调用pam_smb模块进程的权限在系统上执行任意指令。 不过此漏洞需要用户存在于密码文件中以允许其登录提供密码信息。
CVSS Information
N/A
Vulnerability Type
N/A