Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Performance Co-Pilot 安全漏洞
Vulnerability Description
Performance Co-Pilot (PCP)是由SGI开发的一套支持系统级性能监视的服务,其中的 一个应用程序叫做"pmpost",默认安装时所有者为root,且设置了setuid位。 Performance Co-Pilot 3.6.5之前版本中存在安全漏洞,恶意用户可利用导致DoS(拒绝服务),进而操控受影响系统。该漏洞源于libpcp协议解码功能中存在一些错误。攻击者可利用该漏洞导致基于堆的缓冲区溢出。
CVSS Information
N/A
Vulnerability Type
N/A