843 matches found
Moderate: Red Hat Security Advisory: gdm security and bug fix update
An updated gdm package that fixes a security issue is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Gdm the GNOME Display Manager is a highly configurable reimplementation of xdm, the X Display...
CVE-2007-2990: Undefined Security Weakness
Unspecified vulnerability in inetd in Sun Solaris 10 before 20070529 allows local users to cause a denial of service daemon termination via unspecified manipulations of the /var/run/.inetd.uds Unix domain socket file...
CVE-2005-3070
HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file...
CVE-2005-3070
HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file...
CVE-2005-3070
HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file...
CVE-2005-3070
HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file...
CVE-2005-3070: Undefined Security Weakness
HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file...
CVE-2005-0205
KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of...
security flaw
KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of...
CVE-1999-1402
Technical details about CVE-1999-1402 are not publicly available in the provided documents; monitor for updates.
CVE-1999-1402: Undefined Security Weakness
The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket...
CVE-2000-0864
Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a symlink attack...
CVE-2000-0864: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a symlink attack...
CVE-2000-0864
Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a symlink attack...
CVE-1999-0787
The SSH authentication agent follows symlinks via a UNIX domain socket...
CVE-1999-0787
The CVE describes a local-privilege issue in ssh-agent: an AF_UNIX socket used for key forwarding is created by ssh-agent, and the client’s connection may bypass proper permissions checks, enabling a local attacker to establish sessions as the victim user. The Red Hat entry reiterates the SSH-age...
CVE-1999-0787: Undefined Security Weakness
The SSH authentication agent follows symlinks via a UNIX domain socket...
GNOME esound 0.2.19 - Unix Domain Socket Race Condition
GNOME esound 0.2.19 - Unix Domain Socket Race Condition source: https://www.securityfocus.com/bid/1659/info EsounD, part of the GNOME desktop environment, is a server process allowing several applications to share the same sound hardware. Versions of esound up to and including 0.2.19 create a...
GNOME esound 0.2.19 - Unix Domain Socket Race Condition
source: https://www.securityfocus.com/bid/1659/info EsounD, part of the GNOME desktop environment, is a server process allowing several applications to share the same sound hardware. Versions of esound up to and including 0.2.19 create a world-writable directory /tmp/.esd which is also used to...