Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The do_ed_script function in pch.c in GNU patch through 2.7.6, and patch in FreeBSD 10.1 before 10.1-RELEASE-p17, 10.2 before 10.2-BETA2-p3, 10.2-RC1 before 10.2-RC1-p2, and 0.2-RC2 before 10.2-RC2-p1, allows remote attackers to execute arbitrary commands via a crafted patch file, because a '!' character can be passed to the ed program.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreeBSD patch 安全漏洞
Vulnerability Description
FreeBSD是由Core Team团队负责的FreeBSD项目中的一套类Unix自由操作系统，是经过BSD、386BSD和4.4BSD发展而来的类Unix的一个重要分支。patch是其中的一个自动应用补丁的模块。 FreeBSD中的patch存在安全漏洞。远程攻击者可借助特制的补丁文件利用该漏洞执行任意命令。以下版本受到影响：FreeBSD 10.1-RELEASE-p17之前的10.1版本，10.2-BETA2-p3之前的10.2版本，10.2-RC1-p2之前的10.2-RC1版本，10.2-RC2
CVSS Information
N/A
Vulnerability Type
N/A