Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The processor_request function in the debugger server for DataRescue IDA Pro 5.0 and 5.1 does not verify that authentication has taken place before invoking the perform_request function, which allows remote attackers to perform unauthorized actions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DataRescue IDA Pro绕过口令认证执行远程调试漏洞
Vulnerability Description
IDA Pro Disassembler和Debugger是Windows或Linux上的交互式、可编程、可扩展的多处理器反汇编和调试程序。 IDA Pro在处理远程调试命令的流程上存在设计问题，未经认证的远程用户可以轻易绕过口令认证执行调试操作。 IDA Pro的调试器服务器允许用户通过-P参数指定认证口令。该服务器的processor_request()函数没有确保在调用perform_request()函数之前远程用户都已通过认证，因此在认证之前所发送的请求也会被正常的处理。
CVSS Information
N/A
Vulnerability Type
N/A