?? 2260.txt
字號:
Rule: --Sid:2260--Summary:This event is generated when an attempt is made to exploit a knownvulnerability in versions of Sendmail.--Impact:Remote arbitrary code execution.--Detailed Information:A vulnerability exists in the prescan() function used in Sendmail priorto version 8.12.9. This function contains an error when converting acharacter to an integer value while processing SMTP headers.--Affected Systems:All systems using Sendmail.--Attack Scenarios:An attacker could exploit this condition to process code of theirchoosing and open a listening shell bound to a high port, thus opening thesystem to further compromise.--Ease of Attack:Simple. Exploit code exists.--False Positives:None known.--False Negatives:None known.--Corrective Action:Upgrade Sendmail to the latest non-affected verison.--Contributors:Sourcefire Vulnerability Research TeamBrian Caswell <bmc@sourcefire.com>Nigel Houghton <nigel.houghton@sourcefire.com>-- Additional References:--
?? 快捷鍵說明
復制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -