Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
UTempter多个本地漏洞
Vulnerability Description
Utempter允许包含..(点 点)目录遍历序列的设备名称,本地用户可以通过在与信任utmp或者wtmp文件的应用程序相组合的设备名称上的链接攻击覆盖任意文件。
CVSS Information
N/A
Vulnerability Type
N/A