CVE:CVE-2000-0520
CNNVD:CNNVD-200006-031
dump包中restore程序0.4b17和更早的版本存在缓冲区溢出漏洞。本地用户借助超长磁带名称可以执行任意命令。
solution:Upgrade stelian pop_dump to a higher version than 0.4b9.0,0.4b9.9,0.4b15.1,0.4b15.30,0.4b16.0,0.4b17.0,and avoid the version 0.4b9.0,0.4b9.9,0.4b15.1,0.4b15.30,0.4b16.0,0.4b17.0