Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2017-0374

EPSS 0.04% · P12
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2017-0374

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
lib/Config/Model.pm in Config-Model (aka libconfig-model-perl) before 2.102 allows local users to gain privileges via a crafted model in the current working directory, related to use of . with the INC array.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Config-Model 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Config-Model(又名libconfig-model-perl)是一个开源的用于验证、迁移或者编辑配置文件的工具,它能够支持图形、交互式命令等多种用户界面。 Config-Model 2.102之前的版本中的lib/Config/Model.pm文件存在安全漏洞。本地攻击者可借助当前工作目录下的特制的模型利用该漏洞获取权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-libconfig-model-perl libconfig-model-perl -

II. Public POCs for CVE-2017-0374

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2017-0374

Please Login to view more intelligence information

Same Patch Batch · n/a · 2017-05-23 · 106 CVEs total

CVE-2017-9171AutoTrace 安全漏洞
CVE-2017-9184AutoTrace 缓冲区错误漏洞
CVE-2017-9183AutoTrace 代码问题漏洞
CVE-2017-9182AutoTrace 安全漏洞
CVE-2017-9181AutoTrace 安全漏洞
CVE-2017-9180AutoTrace 安全漏洞
CVE-2017-9179AutoTrace 安全漏洞
CVE-2017-9178AutoTrace 安全漏洞
CVE-2017-9177AutoTrace 安全漏洞
CVE-2017-9176AutoTrace 安全漏洞
CVE-2017-9175AutoTrace 安全漏洞
CVE-2017-9174AutoTrace 安全漏洞
CVE-2017-9173AutoTrace 缓冲区错误漏洞
CVE-2017-9172AutoTrace 缓冲区错误漏洞
CVE-2017-9161AutoTrace 输入验证错误漏洞
CVE-2017-9164AutoTrace 安全漏洞
CVE-2017-9163AutoTrace 缓冲区错误漏洞
CVE-2017-9162AutoTrace 输入验证错误漏洞
CVE-2017-9165AutoTrace 安全漏洞
CVE-2017-9160AutoTrace 缓冲区错误漏洞

Showing top 20 of 106 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2017-0374

No comments yet


Leave a comment