CVE-2006-1523

The groupcompletesignal function in the RCU signal handling signal.c in Linux kernel 2.6.16, and possibly other versions, has unknown impact and attack vectors related to improper use of BUGON...

CVE-2006-1523

CVE-2006-1523 affects the Linux kernel’s RCU signal handling: the __group_complete_signal function in signal.c may allow local DoS due to an unsafe BUG_ON, guarded by siglock while switch_exit_pids() uses tasklist_lock. Affected version cited is kernel 2.6.16 (and possibly other 2.6.x). The conne...

Sendmail: Race condition in the handling of asynchronous signals

Background Sendmail is a popular mail transfer agent MTA. Description ISS discovered that Sendmail is vulnerable to a race condition in the handling of asynchronous signals. Impact An attacker could exploit this via certain crafted timing conditions. Workaround There is no known workaround at thi...

CVE-2005-3847

The handlestopsignal function in signal.c in Linux kernel 2.6.11 up to other versions before 2.6.13 and 2.6.12.6 allows local users to cause a denial of service deadlock by sending a SIGKILL to a real-time threaded process while it is performing a core dump...

RHEL 4 : cups (RHSA-2005:772)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:772 advisory. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating systems. A bug was found in the way CUPS processes malform...

Moderate: Red Hat Security Advisory: cups security update

Updated CUPS packages that fix a security issue are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating systems....

smail remote and local root holes

-- I've been trying to send an email to greg woods, the maintainer of smail, to 3 different email addresses now. They have all bounced. My email to the smail user list bounced as well. I didn't want to just release this 0day, but I'm not hunting these people down, so here it is. No exploit for yo...

[SECURITY] [DSA 606-1] New nfs-utils packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 606-1 [email protected] http://www.debian.org/security/ Martin Schulze December 8th, 2004 http://www.debian.org/security/faq -...

Debian DSA-083-1 : procmail - insecure signal handling

Using older versions of procmail it was possible to make procmail crash by sending it signals. On systems where procmail is installed setuid this could be exploited to obtain unauthorized privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

[SA12226] tnftpd Signal Handling Privilege Escalation Vulnerabilities

TITLE: tnftpd Signal Handling Privilege Escalation Vulnerabilities SECUNIA ADVISORY ID: SA12226 VERIFY ADVISORY: http://secunia.com/advisories/12226/ CRITICAL: Moderately critical IMPACT: System access, Privilege escalation WHERE: From remote SOFTWARE: tnftpd http://secunia.com/product/3800/...

tnftpd -- remotely exploitable vulnerability

lukemftpd8 is an enhanced BSD FTP server produced within the NetBSD project. The sources for lukemftpd are shipped with some versions of FreeBSD, however it is not built or installed by default. The build system option WANTLUKEMFTPD must be set to build and install lukemftpd. NOTE: An exception i...

RHEL 2.1 : stunnel (RHSA-2003:223)

Updated stunnel packages are now available. These updates correct a potential vulnerability in stunnel's signal handling. Stunnel is a wrapper for network connections. It can be used to tunnel an unencrypted network connection over a secure connection encrypted using SSL or TLS or to provide a...

Moderate: Red Hat Bug Fix Advisory: Updated vsftpd package fixes signal handling bug

An updated vsftpd package that fixes a signal handling bug which could cause the service to stop accepting connections is now available. vsftpd is an FTP File Transfer Protocol daemon. vsftpd was calling unsafe functions from within signal handlers; under heavy load, this could lead to deadlock,...

linux threaded processes DoS

SIGRT1 signal can be delivired to application causing invalid handling of child threads termination...

Possible DoS on Linux kernel 2.4 and 2.6 using sigqueue overflow.

Hello. We faced a bug ? in Linux kernel causing different misbehaviours on our server. After exploration, it seems that we found some security implications of this issue. When a process exits, it's parent is notified by SIGCHLD, and finished child is kept in process table in "zombie" state until...

Stunnel <= 3.24 4.00 Daemon Hijacking Proof of Concept Exploit

No description provided by source. / By Steve Grubb : The technique is simple. 1 Fork so that stunnel can't find you when it dies. 2 Send stunnel a SIGUSR2. Unhandled signals generally kill programs. Since you are a child of stunnel, the OS will deliver the signal. 3 Select on the leaked descript...

Stunnel 3.24/4.00 - Daemon Hijacking

/ By Steve Grubb : The technique is simple. 1 Fork so that stunnel can't find you when it dies. 2 Send stunnel a SIGUSR2. Unhandled signals generally kill programs. Since you are a child of stunnel, the OS will deliver the signal. 3 Select on the leaked descriptor and start serving pages. At the...

Stunnel 3.244.00 - Daemon Hijacking

Stunnel 3.244.00 - Daemon Hijacking / By Steve Grubb : The technique is simple. 1 Fork so that stunnel can't find you when it dies. 2 Send stunnel a SIGUSR2. Unhandled signals generally kill programs. Since you are a child of stunnel, the OS will deliver the signal. 3 Select on the leaked...

myServer 0.4.1 - Signal Handling Denial of Service

myServer 0.4.1 - Signal Handling Denial of Service source: https://www.securityfocus.com/bid/7917/info A vulnerability has been reported for myServer that may result in a denial of service condition. The vulnerability exists when myServer receives certain signals. telnet 127.0.0.1 80 Trying...

myServer 0.4.1 - Signal Handling Denial of Service

source: https://www.securityfocus.com/bid/7917/info A vulnerability has been reported for myServer that may result in a denial of service condition. The vulnerability exists when myServer receives certain signals. telnet 127.0.0.1 80 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is...