CVE-2008-1206

Linux Kiss Server 1.2 is affected by a format string vulnerability in the log_message function (lks.c) when running in non-daemon/foreground mode. The issue allows remote attackers to cause a crash or potentially execute arbitrary code via format string specifiers in an invalid command. Exploitat...

Linux Kiss Server多个格式串处理漏洞

BUGTRAQ ID: 28099 Linux Kiss Server是用于替换PC-LINK软件的服务程序，可运行为守护程序或在前台运行。 以前台模式运行的Linux Kiss Server的lks.c文件中的logmessage函数存在格式串处理漏洞，允许攻击者获得非授权访问。 以下为漏洞代码： Function logmessage: ifbackgroundmode == 0 iftype == 'l' fprintfstdout,logmsg; iftype == 'e' fprintfstderr,logmsg; freelogmsg; Function...