Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Abyss Web Server远程超长GET请求堆破坏漏洞
Vulnerability Description
Abyss Web Server是一宽免费的个人性质的WEB服务程序。 Abyss Web服务程序由于没有充分检查通过用户提交的HTTP GET请求，远程攻击者可以利用这个漏洞对服务进行缓冲区溢出攻击，可能以WEB进程权限在系统上执行任意指令。 Abyss Web服务对GET请求在堆上分配0x800大小的缓冲区，由于在调用strcpy()函数时没有对输入参数进行边界缓冲区检查，通过提交超长GET请求并最后追加":\"字符，可触发溢出，精心构建提交数据可能以WEB进程权限在系统上执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A