Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cyrus SASL SASL_PATH环境变量权限提升漏洞
Vulnerability Description
Cyrus SASL提供多个用于安全认证的开放源代码实现。 Cyrus SASL对SASL_PATH环境变量处理不正确,本地攻击者可以利用这个漏洞进行提升特权攻击。 攻击者可以利用SASL_PATH环境变量,使特权应用程序从用户指定的任意目录中装载任意库文件,可导致恶意程序以高特权运行。
CVSS Information
N/A
Vulnerability Type
N/A