漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the copyapplfile function. When parsing the len element, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15869.
CVSS Information
N/A
Vulnerability Type
栈缓冲区溢出
Vulnerability Title
Netatalk 安全漏洞
Vulnerability Description
Netatalk是一款开源软件，为 Classic Mac OS 和 macOS 在 Unix-like OS 上提供 AFP 文件服务器功能。 Netatalk存在安全漏洞，该漏洞源于解析len元素时，该过程在将用户提供的数据复制到固定长度的基于堆栈的缓冲区之前未正确验证其长度。攻击者利用该漏洞在root环境中执行代码。
CVSS Information
N/A
Vulnerability Type
N/A