176 matches found
CVE-2011-1677: Undefined Security Weakness
mount in util-linux 2.19 and earlier does not remove the /etc/mtab lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors...
CVE-2010-0791
The 1 ncpmount, 2 ncpumount, and 3 ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service application failure via unspecified vectors that trigger the creation of a /etc/mtab file that persists after the program exits...
Debian Security Advisory DSA 815-1 (kdebase)
The remote host is missing an update to kdebase announced via advisory DSA 815-1. Ilja van Sprundel discovered a serious lock file handling error in kcheckpass that can, in some configurations, be used to gain root access. The old stable distribution woody is not affected by this problem. OpenVAS...
Debian: Security Advisory (DSA-815-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DEBIAN-CVE-2007-0472
Multiple race conditions in Smb4K before 0.8.0 allow local users to 1 modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the removelockfile function in core/smb4kfileio.cpp, and 2 add lines to the sudoers file via a symlink attack on...
Fedora Core 4 : samba-3.0.23-1.fc4 (2006-808)
Wed Jul 12 2006 Jay Fenlason 3.0.23-1.fc4 - Update to 3.0.23 to close bz197836 CVE-2006-3403 Samba denial of service - include related spec file, filter-requires-samba.sh and patch changes from rawhide. -winbind, and -access patches are obsolete. - include the fixed smb.init file from rawhide,...
CentOS 4 : kdebase (CESA-2006:0582)
Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environment. These core packages include the file manager...
kdebase security update
CentOS Errata and Security Advisory CESA-2006:0582 Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop...
RHEL 4 : kdebase (RHSA-2006:0582)
Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environment. These core packages include the file manager...
Low: Red Hat Security Advisory: kdebase security fix
Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environment. These core packages include the file manager...
DSA-815-1 kdebase - programming error
Bulletin has no description...
USN-176-1: kcheckpass vulnerability
Ilja van Sprundel discovered a flaw in the lock file handling of kcheckpass. A local attacker could exploit this to execute arbitrary code with root privileges...
CVE-2002-1914
dump 0.4 b10 through b29 allows local users to cause a denial of service execution prevention by using flock to lock the /etc/dumpdates file...
sendmail-flock-sploit.txt
A problem has been identified in sendmail that can result in a denial of service attack. Attached is proof of concept code for this issue. http://www.sendmail.org/LockingAdvisory.txt have a safe Memorial Day folks. -KF ; ; Safemode.org, written by zillion 2002/05/24 ; http://www.snosoft.com :...
PT-2000-1304 · Concurrent Versions · Cvs
Name of the Vulnerable Software and Affected Versions: Concurrent Versions Software CVS affected versions not specified Description: The issue allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate user. This is due to the use o...
Qualcomm qpopper 2.53/3.0 / RedHat imap 4.5 -4 / UoW imap 4.5 popd - Lock File Denial of Service
source: https://www.securityfocus.com/bid/1132/info Vulnerabilities exist in a number of pop3 daemon implementations, having to do with their creation of lock files. Affected include Qualcomm's qpopper, and the popd included as part of the imap-4 rpm from RedHat. Lockfiles in both implementation...