CVE-2004-1014

CVE-2004-1014 affects statd in nfs-utils 1.257 and earlier, where SIGPIPE is not ignored, allowing a remote attacker to trigger a denial-of-service (server crash) via a prematurely terminated TCP connection. The OpenVAS, Ubuntu USN-36-1, Debian DSA 606-1, Gentoo GLSA 200412-08, and Red Hat RHSA-2...

CVE-2004-1014

statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service server process crash via a TCP connection that is prematurely terminated...

CVE-2004-1014

statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service server process crash via a TCP connection that is prematurely terminated...

Debian DSA-606-1 : nfs-utils - wrong signal handler

SGI has discovered that rpc.statd from the nfs-utils package, the Network Status Monitor, did not ignore the 'SIGPIPE'. Hence, a client prematurely terminating the TCP connection could also terminate the server process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

USN-36-1: NFS statd vulnerability

SGI discovered a remote Denial of Service vulnerability in the NFS statd server. statd did not ignore the "SIGPIPE" signal which caused it to shutdown if a misconfigured or malicious peer terminated the TCP connection prematurely...

sudoscript -- signal delivery vulnerability

If non-root access is enabled in sudoscript, any member of the ssers group can send a SIGHUP signal to any process...

Debian DSA-151-1 : xinetd - pipe exposure

Solar Designer found a vulnerability in xinetd, a replacement for the BSD derived inetd. File descriptors for the signal pipe introduced in version 2.3.4 are leaked into services started from xinetd. The descriptors could be used to talk to xinetd resulting in crashing it entirely. This is usuall...

Debian DSA-083-1 : procmail - insecure signal handling

Using older versions of procmail it was possible to make procmail crash by sending it signals. On systems where procmail is installed setuid this could be exploited to obtain unauthorized privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

CVE-2000-0747

The CVE-2000-0747 entry concerns OpenLDAP prior to version 1.2.11 on Conectiva Linux. The issue arises from the logrotate script sending an improper signal to the kernel log daemon (klogd), which results in klogd being killed. The available records describe the vulnerable component as the logrota...

TNFTPD Multiple Signal Handler Remote Superuser Privilege Escalation

Binary data 1854.prm...

CVE-2004-0794

CVE-2004-0794 affects lukemftpd/tnftpd (before 20040810). Race conditions in the out-of-band signal handling for ABOR can corrupt internal state, enabling a remote authenticated attacker to cause a denial of service or execute arbitrary code. Depending on the -r option, commands may run with the ...

[SA12226] tnftpd Signal Handling Privilege Escalation Vulnerabilities

TITLE: tnftpd Signal Handling Privilege Escalation Vulnerabilities SECUNIA ADVISORY ID: SA12226 VERIFY ADVISORY: http://secunia.com/advisories/12226/ CRITICAL: Moderately critical IMPACT: System access, Privilege escalation WHERE: From remote SOFTWARE: tnftpd http://secunia.com/product/3800/...

CVE-2004-0794: Undefined Security Weakness

Multiple signal handler race conditions in lukemftpd aka tnftpd before 20040810 allow remote authenticated attackers to cause a denial of service or execute arbitrary code...

tnftpd -- remotely exploitable vulnerability

lukemftpd8 is an enhanced BSD FTP server produced within the NetBSD project. The sources for lukemftpd are shipped with some versions of FreeBSD, however it is not built or installed by default. The build system option WANTLUKEMFTPD must be set to build and install lukemftpd. NOTE: An exception i...

CVE-2004-0554

Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service system crash, possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program...

SuSE-SA:2003:049: Linux Kernel

The remote host is missing the patch for the advisory SuSE-SA:2003:049 Linux Kernel. This security update fixes a serious vulnerability in the Linux kernel. A missing bounds check in the brk system call allowed processes to request memory beyond the maximum size allowed for tasks, causing kernel...

Fedora Core 1 : kernel-2.4.22-1.2194.nptl (2004-186)

Numerous problems referencing userspace memory were identified in several device drivers by Al Viro using the sparse tool. The Common Vulnerabilities and Exposures project cve.mitre.org assigned the name CVE-2004-0495 to this issue. A problem was found where userspace code could execute certain...

CVE-2004-0459

The Clear Channel Assessment CCA algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy aka "jabber", which prevents devices from transmitting data...

RHEL 2.1 : stunnel (RHSA-2003:297)

Updated stunnel packages are now available. These updates address problems stemming from improper use of non-reentrant functions in signal handlers. Stunnel is a wrapper for network connections. It can be used to tunnel an unencrypted network connection over an encrypted connection encrypted usin...

RHEL 2.1 : stunnel (RHSA-2003:223)

Updated stunnel packages are now available. These updates correct a potential vulnerability in stunnel's signal handling. Stunnel is a wrapper for network connections. It can be used to tunnel an unencrypted network connection over a secure connection encrypted using SSL or TLS or to provide a...