?? 1260.txt
字號(hào):
Rule:--Sid:1260--Summary:This event is generated when an attempt is made to exploit a knownvulnerability in AOLServer.--Impact:Possible Denial of Service (DoS) and execution of arbitrary code.--Detailed Information:A vulnerability exists in versions of AOL Server that may allow anattacker to overflow a fixed length buffer and execute code of theirchoosing on a vulnerable host.The problem lies in the processing of user supplied passwords used inbasic authentication to the host. A long password may exceed a fixedlength buffer and allow an attacker to overwrite portions of memory andexecute code of their choosing.--Affected Systems: AOL AOLServer 3.0 and 3.2--Attack Scenarios:An attacker needs to supply a password 2048 bytes in length to triggerthe overflow.--Ease of Attack:Simple. Exploits are available.--False Positives:None known.--False Negatives:None known.--Corrective Action:Upgrade to the latest non-vulnerable version of the software.--Contributors:Sourcefire Vulnerability Research TeamBrian Caswell <bmc@sourcefire.com>Nigel Houghton <nigel.houghton@sourcefire.com>-- Additional References:--
?? 快捷鍵說(shuō)明
復(fù)制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號(hào)
Ctrl + =
減小字號(hào)
Ctrl + -