1758 matches found
CVE-2005-0077
The DBI library libdbi-perl for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file...
USN-70-1: Perl DBI module vulnerability
Javier Fernández-Sanguino Peña from the Debian Security Audit Project discovered that the module DBI::ProxyServer in Perl's DBI library created a PID file in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking...
perl DBI::ProxyServer module symbolic links problem
Symbolic links problem on pid file creation...
DEBIAN-CVE-2004-2698
Race condition in IMWheel 1.0.0pre11 and earlier, when running with the -k option, allows local users to cause a denial of service IMWheel crash and possibly modify arbitrary files via a symlink attack on the imwheel.pid file...
FreeBSD : imwheel -- insecure handling of PID file (77)
The following package needs to be updated: imwheel %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkge31d44a221e311d99289000c41e2cdad.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
CVE-2002-1381
Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pidfilepath value...
imwheel symbolic links problem
PID file is created in /tmp directory...
imwheel -- insecure handling of PID file
A Computer Academic Underground advisory describes the consequences of imwheel's handling of the process ID file PID file: imwheel exclusively uses a predictably named PID file for management of multiple imwheel processes. A race condition exists when the -k command-line option is used to kill...
DEBIAN-CVE-2002-1827
Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the 1 alias, 2 map, 3 statistics, and 4 pid files...
DEBIAN-CVE-2002-1381
Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pidfilepath value...
Linux Kernel 2.2 - mmap() Local Denial of Service
Linux Kernel 2.2 - mmap Local Denial of Service / source: https://www.securityfocus.com/bid/6420/info A denial of service vulnerability has been discovered in the Linux 2.2 kernel. It has been reported that it is possible for an unprivileged user to cause the kernel to stop responding due to a bu...
Security Bulletin MS02-002
---------------------------------------------------------------------- Title: Malformed Network Request can cause Office v. X for Mac to Fail Date: 06 February 2002 Software: Microsoft Office v. X for Mac Impact: Denial of Service Max Risk: Low Bulletin: MS02-002 Microsoft encourages customers to...
APC UPS 3.7.2 (apcupsd) Local Denial of Service Exploit
Exploit for linux platform in category dos / poc ======================================================= APC UPS 3.7.2 apcupsd Local Denial of Service Exploit ======================================================= / Local Denial of Service for any linux box running APCUPSD v3.7.2 APCUPSD has his...
APC UPS 3.7.2 - 'apcupsd' Local Denial of Service
/ Local Denial of Service for any linux box running APCUPSD v3.7.2 APCUPSD has his pid file world writeable, therefore it is possible to let it kill another pid and create a denial of service against any running daemon. when the apcupsd is stopped, for example Bug discovered by: Mattias Dartsch...
apcupsd 3.7.2 Denial of Service
Title: apcupsd 3.7.2 Denial of Service Affected Application: apcupsd daemon Affected Versions: 3.7.2 and maybe prior Not affected: 3.8.0 and above Affected Platforms: all Linux / Unix Vulnerability Class: Denial of Service local Author Notified: Yes July 12th 2000 Fix available: Yes included...
CVE-2000-0094
The CVE-2000-0094 entry concerns BSD procfs allowing local privilege escalation to root by manipulating the /proc/pid/mem interface through a modified file descriptor for stderr. The vulnerability is rooted in the procfs interface and enables a local attacker to gain full privileges, as described...
