漏洞标题
N/A
漏洞描述信息
在Protegrity Secure.Data Extension Feature (SEF) 2.2.3.9之前版本的Protegrity.dll中缓冲区溢出允许通过扩展存储过程(1) xp_pty_checkusers、(2) xp_pty_insert 或 (3) xp_pty_select 执行任意代码的攻击者执行代码。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
Buffer overflows in protegrity.dll of Protegrity Secure.Data Extension Feature (SEF) before 2.2.3.9 allow attackers with SQL access to execute arbitrary code via the extended stored procedures (1) xp_pty_checkusers, (2) xp_pty_insert, or (3) xp_pty_select.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
Protegrity Secure.Data Extension Feature (SEF) protegrity.dll代码执行漏洞
漏洞描述信息
Protegrity Secure.Data Extension Feature (SEF) 2.2.3.9之前版本的protegrity.dll存在缓冲区溢出漏洞。具有SQL访问权限的攻击者可以借助扩展存储的程序(1)xp_pty_checkusers,(2)xp_pty_insert,或(3)xp_pty_select执行任意代码。
CVSS信息
N/A
漏洞类别
授权问题