Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
inetutils tftp客户端缓冲区溢出漏洞
Vulnerability Description
GNU tftp client是一款TFTP客户端。 GNU tftp客户端在DNS名字解析时存在问题，远程攻击者可以利用这个漏洞进行缓冲区溢出攻击，可能以tftp客户端进程权限在系统上执行任意指令。 问题是存在于处理gethostbyname()返回的数据中，把解析的主机名没有任何检查就拷贝到静态缓冲区。由于用于实现FTP命令的函数指针位于.bss区，因此攻击者配置恶意DNS服务器，可能以tftp客户端进程权限在系统上执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A