Advertisement

Linux API系统存在安全漏洞

阅读量:

The use of the system() function may lead to exploitable vulnerabilities, particularly in the most severe scenario, as it allows for arbitrary system command execution. In situations where calls to system() are made, these risks are especially notable.

  1. A tainted command string, either unprocessed or improperly processed, may be transmitted from an external source.
  2. When executing commands without specifying their file paths, if the system's ability to resolve file paths remains accessible to attackers.
  3. Specifying a relative executable file with access to the current working directory

全部评论 (0)

还没有任何评论哟~