Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Untrusted search path vulnerability in Cisco ASA Software 8.x before 8.4(3), 8.5, and 8.7 before 8.7(1.13) allows local users to gain privileges by placing a Trojan horse library file in external memory, leading to library use after device reload because of an incorrect LD_LIBRARY_PATH value, aka Bug ID CSCtq52661.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco ASA Software 输入验证错误漏洞
Vulnerability Description
Cisco ASA是美国思科（Cisco）公司的一套防火墙设备。该设备还包括IPS（入侵防御系统）、SSL VPN、IPSec VPN、反垃圾邮件等功能。 Cisco ASA Software中存在不可信的搜索路径漏洞，该漏洞源于程序没有正确设置LD_LIBRARY_PATH环境变量。本地攻击者可通过在外部存储器中放置‘Trojan horse library’文件利用该漏洞获取权限。以下版本受到影响：Cisco ASA Software 8.4(3)之前8.x版本，8.5版本，8.7(1.13)之前8.
CVSS Information
N/A
Vulnerability Type
N/A