Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.[PID].stats temporary file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SILC Server以不安全方式创建临时文件漏洞
Vulnerability Description
SILC(Secure Internet Live Conferencing)是安全的互联网会议讨论系统,可以发送任何类型的信息,包括多媒体信息,如视频、音频、图象等等。 SILC Server以不安全的方式创建临时文件,攻击者可以结合符号链接攻击利用这个漏洞以运行有漏洞脚本用户的权限创建和覆盖任意文件。如果覆盖了关键文件的话,攻击最可能导致的是数据丢失或拒绝服务。其他攻击也有可能。
CVSS Information
N/A
Vulnerability Type
N/A