Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via file names containing format string characters that are not properly handled when executing an "ls" command.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Samhain Labs HSFTP远程格式串处理漏洞
Vulnerability Description
hsftp是一款FTP客户端程序。 hsftp对特殊文件名缺少正确处理，远程攻击者可以利用这个漏洞对Hsftp程序进行格式串攻击，可能以hsftp进程权限执行任意指令。 攻击者可以在远程FTP服务器上构造一个带有格式串的特殊文件名的文件，当Hsftp连接并进行目录列表时，可导致内存被覆盖，精心构建文件名数据可能以hsftp进程权限执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A