2765 matches found
CVE-2004-1033
CVE-2004-1033 concerns Fcron versions 2.0.1, 2.9.4 (and possibly earlier) leaking file descriptors for open files, enabling a local user to bypass access restrictions and read the files fcron.allow and fcron.deny via the EDITOR environment variable. The available connected documents confirm the a...
Debian DSA-151-1 : xinetd - pipe exposure
Solar Designer found a vulnerability in xinetd, a replacement for the BSD derived inetd. File descriptors for the signal pipe introduced in version 2.3.4 are leaked into services started from xinetd. The descriptors could be used to talk to xinetd resulting in crashing it entirely. This is usuall...
CVE-2002-1372
Common Unix Printing System CUPS 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service resource exhaustion by causing file descriptors to be assigned and not released, as demonstrated...
CVE-2002-1372
Common Unix Printing System CUPS 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service resource exhaustion by causing file descriptors to be assigned and not released, as demonstrated...
Apache < 2.0.46 Multiple Vulnerabilities
Binary data 1443.prm...
Mandrake Linux Security Advisory : cups (MDKSA-2003:001)
iDefense reported several security problems in CUPS that can lead to local and remote root compromise. An integer overflow in the HTTP interface can be used to gain remote access with CUPS privilege. A local file race condition can be used to gain root privilege, although the previous bug must be...
Apache mod_php and mod_perl file decriptor leak
Descriptor leakage allowws to spoof https session in child process...
Hijacking Apache 2 via mod_perl
Product: modperl Versions: 1.9909 / apache 2.0.47 URL: http://perl.apache.org Impact: Daemon Hijacking Bug class: Leaked Descriptor Vendor notified: Yes Fix available: No Date: 01/21/04 Issue: ====== Modperl under apache 2.0.x leaks critical file descriptors that can be used to takeover hijack th...
Hijacking Apache 2 via mod_perl
Product: modperl Versions: 1.9909 / apache 2.0.47 URL: http://perl.apache.org Impact: Daemon Hijacking Bug class: Leaked Descriptor Vendor notified: Yes Fix available: No Date: 01/21/04 Issue: ====== Modperl under apache 2.0.x leaks critical file descriptors that can be used to takeover hijack th...
Apache 2.0.4x mod_perl - File Descriptor Leakage (3)
Apache 2.0.4x modperl - File Descriptor Leakage 3 source: https://www.securityfocus.com/bid/9471/info A vulnerability has been reported to exist in the Apache modperl module that may allow local attackers to gain access to privileged file descriptors. This issue could be exploited by an attacker ...
Apache 2.0.4x mod_perl - File Descriptor Leakage (3)
source: https://www.securityfocus.com/bid/9471/info A vulnerability has been reported to exist in the Apache modperl module that may allow local attackers to gain access to privileged file descriptors. This issue could be exploited by an attacker to hijack a vulnerable server daemon. Other attack...
Hijacking Apache https by mod_php
Product: PHP - modphp Versions: 4.2.x, 4.3.x / apache 2.0.x URL: http://www.php.net Impact: Daemon Hijacking Bug class: Leaked Descriptor Vendor notified: Yes Fix available: No Date: 12/26/03 Issue: ====== Modphp under apache 2.0.x leaks a critical file descriptor that can be used to takeover...
Apache 2.0.4x mod_php - File Descriptor Leakage (1)
Apache 2.0.4x modphp - File Descriptor Leakage 1 // source: https://www.securityfocus.com/bid/9302/info Reportedly, the Apache modphp module may be prone to a vulnerability that may allow a local attacker to gain access to privileged file descriptors. As a result, the attacker may pose as a...
Apache 2.0.4x mod_php - File Descriptor Leakage (1)
// source: https://www.securityfocus.com/bid/9302/info Reportedly, the Apache modphp module may be prone to a vulnerability that may allow a local attacker to gain access to privileged file descriptors. As a result, the attacker may pose as a legitimate server and possibly steal or manipulate...
Important: Red Hat Security Advisory: Updated IA64 kernel packages address security vulnerabilities, bugfixes
Updated kernel packages that address several security vulnerabilites, fix a number of bugs, and update various drivers are now available. The Linux kernel handles the basic functions of the operating system. A flaw in bounds checking in the dobrk function in the Linux kernel versions 2.4.22 and...
stunnel file descriptors leak
Child process has access to critical descriptors...
PT-2003-1958 · Sco · Open Unix +1
Name of the Vulnerable Software and Affected Versions: SCO UnixWare versions 7.1.1, 7.1.3 Open UNIX version 8.0.0 Description: The issue allows local users to bypass protections for the address space file for a process ID by obtaining a procfs file descriptor for the file and calling execve on a...
DEBIAN-CVE-2003-0740
Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen, which allows local users to hijack the Stunnel server...
