Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allows local users to read portions of arbitrary files via the -f command line option.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Frox 任意配置文件访问漏洞
Vulnerability Description
Frox是一个开源的FTP透明代理，工作在BSD和其他使用ipfilter的操作系统下。 frox 0.7.18，运行setuid根目录时，在读取配置文件时无法正确分配权限，这样本地用户就可以通过-f 命令选项任意读取一部分文件。
CVSS Information
N/A
Vulnerability Type
N/A