Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
DList (dlist.exe) in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog command with an incorrect password hash, which is not properly handled by the _cmd_sendlog function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NetWin DMail DList远程认证绕过漏洞
Vulnerability Description
DMail 3.1a中的DList (dlist.exe)允许远程攻击者通过一个带有不正确密码散列的sendlog命令，让_cmd_sendlog函数不能正确处理它，从而绕过认证、读取日志文件并关闭系统。
CVSS Information
N/A
Vulnerability Type
N/A