Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ISC INN控制消息处理缓冲区溢出漏洞
Vulnerability Description
Internet Software Consortium (ISC) Internet News (INN)是一款强大的Usenet系统,包括NNTP服务器和新闻阅读服务器,可使用在大多数UNIX操作系统下,包括Linux。 ISC INN的控制消息处理代码中存在一个问题,远程攻击者可以利用这个漏洞进行缓冲区溢出攻击,可能以innd进程权限在系统上执行任意指令。 由于innd设计成在绑定119端口后就丢弃root权限,因此成功利用此漏洞只能以news用户权限在系统上执行任意指令。目前没有详细漏洞细节提供。
CVSS Information
N/A
Vulnerability Type
N/A