Windows XP Service Manager race conditions

On some race conditions confidential information may appear in the files open by system services during system shutdown...

FreeBSD ipfw packet filter race conditions

Because of insuddicient locking it's possible to corrupt cached lookup table on machines with threading PREEMPTIVE multitasking...

clamav -- MS-Expand file handling DoS vulnerability

An iDEFENSE Security Advisory reports: Remote exploitation of an input validation error in Clam AntiVirus ClamAV allows attackers to cause a denial of service condition. The vulnerability specifically exists due to improper behavior during exceptional conditions. Successful exploitation allows...

Linux kernel msync race conditions

Race conditions allow inject dynamic library into process space...

CVE-2005-1727

Apple Mac OS X 10.4.x up to 10.4.1 sets insecure world- and group-writable permissions for the 1 system cache folder and 2 Dashboard system widgets, which allows local users to conduct unauthorized file operations via "file race conditions."...

CVE-2005-1727

Apple Mac OS X 10.4.x up to 10.4.1: insecure world- and group-writable permissions were set for the system cache folder and Dashboard widgets, enabling local users to perform unauthorized file operations via file race conditions. Affected: Mac OS X 10.4.x (up to 10.4.1). Root cause: incorrect per...

CVE-2005-1727: Undefined Security Weakness

Apple Mac OS X 10.4.x up to 10.4.1 sets insecure world- and group-writable permissions for the 1 system cache folder and 2 Dashboard system widgets, which allows local users to conduct unauthorized file operations via "file race conditions."...

MacOS X launchd synbolic links race conditions

Unsafe temporary files creation...

Tcpdump - bgp_update_print Remote Denial of Service

/ 2005-05-31: Modified by [email protected] to test tcpdump infinite loop vulnerability. libnet 1.1 Build a BGP4 update message with what you want as payload Copyright c 2003 Fr d ric Raynal All rights reserved. Examples: empty BGP UPDATE message: ./bgp4update -s 1.1.1.1 -d 2.2.2.2 libnet 1.1...

CVE-2005-1727

Apple Mac OS X 10.4.x up to 10.4.1 sets insecure world- and group-writable permissions for the 1 system cache folder and 2 Dashboard system widgets, which allows local users to conduct unauthorized file operations via "file race conditions."...

Warrior Kings: Battles 1.23 - Remote Denial of Service

Warrior Kings: Battles 1.23 - Remote Denial of Service source: https://www.securityfocus.com/bid/13712/info Warrior Kings: Battles is susceptible to a remote denial of service vulnerability. This is due to a failure of the game server to properly handle exceptional conditions. This vulnerability...

IBM AIX Bellmail mail agent race conditions

Race conditions during temporary file creations...

CVE-2005-0893

modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc...

CVE-2005-0893

modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc...

TCP/IP implementations do not adequately validate ICMP error messages

Overview Multiple TCP/IP implementations do not adequately validate ICMP error messages. A remote attacker could cause TCP connections to drop or be degraded using spoofed ICMP error messages. Description A number of widely accepted Internet standards describe different aspects of the relationshi...

USN-110-1: Linux kernel vulnerabilities

Alexander Nyberg discovered an integer overflow in the sysfswritefile function. A local attacker could exploit this to crash the kernel or possibly even execute arbitrary code with root privileges by writing to an user-writable file in /sys under certain low-memory conditions. However, there are...

Linux kernel multiple vulnerabilities

sysfswritefile integer overflow, futex functions DoS, ext3 and jfs race conditions...

CVE-2005-0893

modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc...

RX250305 - OpenMosixView : Multiple Race conditions - advisory and exploit

/ | | // / / / / | | / | / | |/ //|| / / research / . | REXOTECdotCOM | |=------= ADV RX250305 - OpenMosixView : Multiple Race conditions ------=| | | |=--- - INFORMATION ---------------------------------------------------------------------| VulnDiscovery: 2004/12/21 Release Date : 2005/03/25...

advRX250305.txt

\ \ / | | // \ / / \ / / \ | | \ / | \ /\ \ | |/\ /\/|| \ / / research / . | REXOTECdotCOM | |=------= ADV RX250305 - OpenMosixView : Multiple Race conditions ------=| | | |=--- - INFORMATION ---------------------------------------------------------------------| VulnDiscovery: 2004/12/21...