Microsoft Windows捷径漏洞

漏洞信息详情

Microsoft Windows捷径漏洞

• CNNVD编号：CNNVD-200002-031
• 危害等级： 低危
  
  
• CVE编号：
  CVE-2000-0129
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2000-02-04
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  microsoft
• 漏洞来源：
  Discovered by USSR…

Serv-U FTP服务器的SHGetPathFromIDList函数存在缓冲区溢出漏洞。攻击者借助运行malformed .lnk文件的LIST命令可以导致拒绝服务。

Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com.
CatSoft has claimed that the next release of Serv-U will not rely on the API to follow shortcuts.

Vulnerable software and versionsConfiguration 1OR* cpe:/o:microsoft:windows_95* cpe:/o:microsoft:windows_98::gold* cpe:/o:microsoft:windows_nt:4.0* Denotes Vulnerable Software* Changes related to vulnerability configurations

Technical DetailsVulnerability Type (View All)
CVE Standard Vulnerability Entry:http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0129