Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the reverse DNS lookup of Smart IRC Daemon (SIRCD) 0.4.0 and 0.4.4 allows remote attackers to execute arbitrary code via a client with a long hostname.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Smart IRC守护程序远程客户端DNS缓冲区溢出漏洞
Vulnerability Description
sircd是一款开放源代码IRC服务程序。 sircd在检查返回的DNS信息时缺少正确边界缓冲区检查,远程攻击者可以利用这个漏洞提交恶意DNS解析结果可使sircd服务程序崩溃。 sircd在解析反向DNS结果时缺少正确处理,如返回的值超长,可导致发生基于堆栈的溢出。恶意消息的缓冲区可以构建如下: [94 bytes of crap][EBP ][EIP ][400 bytes for nops and shellcode] 提交如下反向DNS解析结果给sircd,可能以sircd进程权限在系统上执行任意
CVSS Information
N/A
Vulnerability Type
N/A