Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted log entries, and possibly avoid detection of attacks, via modified (1) computer name, (2) user name, and (3) IP address fields.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Motorola Timbuktu Pro 对端消息包文伪造漏洞
Vulnerability Description
Motorola的Timbuktu Pro是一款远程控制软件，允许远程访问计算机桌面。 Timbuktu直接从用户所发送的报文中获取了一些包含有对等端信息的字段(计算机名、用户名、IP地址等)，并在目标机器的屏幕上显示这些信息，攻击者在受害用户的日志行中伪造对等端信息。 以下是反汇编的漏洞代码： /----------- .text:6063A62E mov edx, [ebp+lp] .text:6063A631 mov eax, [edx+20h] ; Packet field containing
CVSS Information
N/A
Vulnerability Type
N/A