Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated users to execute arbitrary code via long sadminpwd and verifypwd parameters in a submit action to /dhost/httpstk.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Novell eDirectory HTTPSTK web服务器栈溢出漏洞
Vulnerability Description
Novell eDirectory是一个的跨平台的目录服务器。 eDirectory的/dhost/httpstk模块中存在栈溢出漏洞，通过认证的远程攻击者可以通过向内嵌的HTTPSTK Web服务器的登录表单提交恶意URL参数（<FORM method="post" action="/dhost/httpstk;submit">）来触发这个溢出，导致以SYSTEM权限执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A