HP DTMail附件参数缓冲区溢出漏洞

- AV AC AU C I A
发布： 2025-04-13
修订： 2025-04-13

HP DTMail是在桌面上使用的邮件客户端。 DTMail在处理-a选项参数时存在缓冲区溢出漏洞，本地攻击者可以利用此漏洞获得root用户权限。 以下gdb输出显示了这个漏洞： gdb) r -a -a `perl -e 'print "A" x 9000'` Starting program: /cluster/members/member0/tmp/dtmail -a `perl -e 'print "A"x 9000'` (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... (no debugging symbols found)...(no debugging symbols found)... Program received signal SIGSEGV, Segmentation fault. warning: Hit heuristic-fence-post without finding warning: enclosing function for address 0x4141414141414140 HP dtmail 5.1b...

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有0条受影响产品信息