Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ICAL.EXE in iCal 3.7 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, possibly due to an invalid method name.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
iCal远程缓冲区溢出漏洞
Vulnerability Description
iCal是一款基于WEB的日历系统,可用于显示会议,事件等详细时间安排。 iCal对超长HTTP请求处理不正确,远程攻击者可以利用这个漏洞对iCal服务进行缓冲区溢出攻击,可能以WEB进程权限在系统上执行任意指令。 攻击者可以提交超长HTTP请求而使服务发生访问冲突,精心构建提交数据可能以WEB进程权限在系统上执行任意指令。需要手工重新启动获得正常服务。
CVSS Information
N/A
Vulnerability Type
N/A