CVE-2002-1366

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream...

CVE-2002-1366: Undefined Security Weakness

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream...

Heimdal ftpd/tnftpd/lukemftpd signal handling race conditions

Problem with OOB data processing...

CVE-2004-0794

CVE-2004-0794 affects lukemftpd/tnftpd (before 20040810). Race conditions in the out-of-band signal handling for ABOR can corrupt internal state, enabling a remote authenticated attacker to cause a denial of service or execute arbitrary code. Depending on the -r option, commands may run with the ...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix potential information leaks and a incorrect driver permission for Red Hat Enterprise Linux 2.1 are now available. The Linux kernel handles the basic functions of the operating system. Paul Starzetz discovered flaws in the Linux kernel when handling file offset...

RiSearch 0.99 /RiSearch Pro 3.2.6 - show.pl Open Proxy Relay

source: https://www.securityfocus.com/bid/10812/info RiSearch and RiSearch Pro are reported prone to an open proxy vulnerability. It is reported that the issue presents itself due to a lack of sufficient sanitization performed on user supplied URI parameters. A remote attacker may exploit this...

PHP memory corruption

Invalid exceptional conditions handling allows memory corruption leading to code execution...

[Full-Disclosure] Race conditions in security dialogs

I discovered arbitrary code execution holes in Mozilla, Internet Explorer, and Opera that involve human reaction time. One version of the attack works like this: the page contains a captcha displaying the word "only" and asks you to type the word to verify that you are a human. As soon as you typ...

Multiple browsers security dialogs race conditions

By forcing user to type predictable characters, key sequences or mouse clicks it's possible to conduct situation user event will be received by shortly appeared security dialog for example "Save file" dialog can apper then user is about to press Y key...

FreeBSD : neon format string vulnerabilities (127)

The following package needs to be updated: neon %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg842378958f3911d88b290020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-200...

CVE-2003-1288

Multiple race conditions in Linux-VServer 1.22 with Linux kernel 2.4.23 and SMP allow local users to cause a denial of service kernel oops via unknown attack vectors related to the 1 sinfo and 2 ipinfo data structures and the a forgetoriginalparent, b goodness, c schedule, d updateprocesstimes, a...

CVE-2003-0956

Multiple race conditions in the handling of ODIRECT in Linux kernel prior to version 2.4.22 could cause stale data to be returned from the disk when handling sparse files, or cause incorrect data to be returned when a file is truncated as it is being read, which might allow local users to obtain...

[SECURITY] [DSA-388-1] New kdebase packages fix multiple vulnerabilites in KDM

-------------------------------------------------------------------------- Debian Security Advisory DSA 388-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 19th, 2003 http://www.debian.org/security/faq -...

sane-backends multiple bugs

Multiple DoS conditions...

Novell Netware Enterprise Web Server 5.1/6.0 - 'CGI2Perl.NLM' Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/8251/info Novell Netware Enterprise Web Server cgi2perl.nlm has been reported prone to a buffer overflow vulnerability. The issue presents itself, likely due to insufficient bounds checking performed on user-supplied data. It has been reported that a remo...

Important: Red Hat Security Advisory: : : : Updated OpenSSL packages fix vulnerabilities

Updated OpenSSL packages that fix potential timing-based and modified Bleichenbacher attacks are available for Red Hat Linux on IBM iSeries and pSeries systems. OpenSSL is a commercial-grade, full-featured, and open source toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer...

CVE-2002-1563

stunnel 4.0.3 and earlier allows attackers to cause a denial of service crash via SIGCHLD signal handler race conditions that cause an inconsistency in the child counter...

CVE-2002-1563

Summary: CVE-2002-1563 affects stunnel 4.0.3 and earlier and is due to unsafe handling of SIGCHLD in the child process/daemon path, allowing a race that can crash the process and cause a denial of service. The issue is documented across multiple feeds (NVD entry and OSV/CVE mirrors) with Red Hat ...

CVE-2002-1563

stunnel 4.0.3 and earlier allows attackers to cause a denial of service crash via SIGCHLD signal handler race conditions that cause an inconsistency in the child counter...

[SECURITY] [DSA 292-1] New mime-support packages fix temporary file race conditions

-------------------------------------------------------------------------- Debian Security Advisory DSA 292-1 [email protected] http://www.debian.org/security/ Martin Schulze April 22nd, 2003 http://www.debian.org/security/faq -...