漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, a Directory Traversal in the print function of the VNC service allows authenticated attackers (with access to a VNC session) to automatically transfer malicious PDF documents by moving them into the .spool directory, and then sending a signal to the VNC service, which automatically transfers them to the connected VNC client's filesystem.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
m-privacy TightGate-Pro Server 安全漏洞
Vulnerability Description
m-privacy TightGate-Pro Server是德国m-privacy公司的一个远程控制浏览器系统。 m-privacy TightGate-Pro Server 2.0.406g之前版本存在安全漏洞,该漏洞源于允许经过身份验证的攻击者通过将恶意 PDF 文档移动到 .spool 目录,然后向 VNC 服务发送信号,该服务会自动将它们传输到连接的 VNC 客户端的文件系统。
CVSS Information
N/A
Vulnerability Type
N/A