Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple stack-based buffer overflows in the pgsqlQuery function in NullLogic Groupware 1.2.7, when PostgreSQL is used, might allow remote attackers to execute arbitrary code via input to the (1) POP3, (2) SMTP, or (3) web component that triggers a long SQL query.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NullLogic Groupware pgSQLQuery函数缓冲区溢出安全漏洞
Vulnerability Description
Groupware是一个开源的团队协作软件，包含有即时消息、公共论坛、邮件等多种功能。 远程攻击者可以通过向Groupware的多个模块提交恶意参数请求导致拒绝服务或执行任意代码。 当Groupware配置为使用PostgreSQL数据库服务器时会调用以下函数： int pgSQLQuery(CONN *sid， int sqr， char *SQLquery) { ... char query[8192]; ... memset(query， 0， sizeof(query)); snprintf(qu
CVSS Information
N/A
Vulnerability Type
N/A