Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier may allow local users to gain privileges via a long (1) XAPPLRESLANGPATH or (2) XAPPLRESDIR environment variable, or (3) command line argument.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ARPUS/Ce setuid缓冲区溢出和文件覆盖漏洞
Vulnerability Description
Ce/Ceterm(也被称为ARPUS/Ce)是一款集成的ascii文本编辑器和基于X-based终端模拟器。 Ce启动是会检查是否是ceterm。如果不是的话就会立即丢弃setuid,如果是ceterm的话就会在打开伪终端时丢弃setuid。但是Ce没能正确的处理丢弃权限,这样攻击者就可能滥用应用程序。
CVSS Information
N/A
Vulnerability Type
N/A