CVE-2002-0572

CVE-2002-0572 affects BSD-based systems (notably FreeBSD 4.5 and earlier); the issue arises when a local user closes standard input/output/error (FDs 0–2) and a subsequent setuid-invoked I/O operation reuses those descriptors, allowing read/write access to restricted files. Connected records corr...

CVE-2002-0572: Undefined Security Weakness

FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 standard input, 1 standard output, or 2 standard error, which may then be reused by a called setuid process that intended to...

Apple Mac OSX 10.x FreeBSD 4.x OpenBSD 2.x Solaris 2.52.67.08 - exec C Library Standard IO File Descriptor Closure

Apple Mac OSX 10.x FreeBSD 4.x OpenBSD 2.x Solaris 2.52.67.08 - exec C Library Standard IO File Descriptor Closure / source: https://www.securityfocus.com/bid/4568/info It has been reported that BSD-based kernels do not check to ensure that the C library standard I/O file descriptors 0-2 are vali...

Security Advisory FreeBSD-SA-02:23.stdio

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:23.stdio Security Advisory The FreeBSD Project Topic: insecure handling of stdio file descriptors Category: core Module: kernel Announced: 2002-04-22 Credits: Joost Pol...

FreeBSD-SA-02:23.stdio

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:23.stdio Security Advisory The FreeBSD Project Topic: insecure handling of stdio file descriptors Category: core Module: kernel Announced: 2002-04-22 Credits: Joost Pol ,...

Проблемы в работе с файловыми дескрипторами в OpenBSD (VFS races)

Наличие вызова блокирующей функции между проверкой файлового дескриптора и операцией над ним, позволяет провести операцию над закрытым дескриптором, если дескриптор был закрыт в другом потоке приложения...

CVE-1999-0848

Denial of service in BIND named via consuming more than "fdmax" file descriptors...

CVE-1999-0848

CVE-1999-0848 concerns a denial-of-service in ISC BIND’s named daemon caused by consuming more than the configured fdmax file descriptors. This is confirmed by the NVD entry and Red Hat security page, both citing the same DoS vector. The provided connected documents do not specify exact affected ...

CVE-1999-0848: Undefined Security Weakness

Denial of service in BIND named via consuming more than "fdmax" file descriptors...

PT-2002-3149 · Apple · Cups

Name of the Vulnerable Software and Affected Versions: CUPS versions 1.1.14 through 1.1.17 Description: The issue is related to multiple vulnerabilities in the CUPS package, which can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilitie...