268 matches found
CVE-2006-0058
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations...
Race condition
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations...
CVE-2006-0058
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations...
CVE-2006-0058
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations...
CVE-2006-0058
CVE-2006-0058 is a race-condition vulnerability in Sendmail 8.13.x (before 8.13.6) that can be triggered remotely to execute arbitrary code. The issue arises from improper handling of timeouts during message processing, where setjmp/longjmp usage may be interrupted, enabling memory corruption in ...
security flaw
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations...
CVE-2006-0058: Undefined Security Weakness
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations...
Multiple Linux kernel vulnerabilities
DoS with signal handler, another one ptrace privilege escalation vulnerability...
CVE-2005-0893
CVE-2005-0893 affects Smail, specifically version 3.2.0.120, where modes.c implements signal handlers using certain unsafe library calls. The root cause described is that these unsafe calls in signal handlers can allow an attacker to execute arbitrary code via race conditions in the signal handli...
CVE-2005-0893: Undefined Security Weakness
modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc...
[SECURITY] [DSA 606-1] New nfs-utils packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 606-1 [email protected] http://www.debian.org/security/ Martin Schulze December 8th, 2004 http://www.debian.org/security/faq -...
Debian DSA-606-1 : nfs-utils - wrong signal handler
SGI has discovered that rpc.statd from the nfs-utils package, the Network Status Monitor, did not ignore the 'SIGPIPE'. Hence, a client prematurely terminating the TCP connection could also terminate the server process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
TNFTPD Multiple Signal Handler Remote Superuser Privilege Escalation
Binary data 1854.prm...
CVE-2004-0794
CVE-2004-0794 affects lukemftpd/tnftpd (before 20040810). Race conditions in the out-of-band signal handling for ABOR can corrupt internal state, enabling a remote authenticated attacker to cause a denial of service or execute arbitrary code. Depending on the -r option, commands may run with the ...
CVE-2004-0794: Undefined Security Weakness
Multiple signal handler race conditions in lukemftpd aka tnftpd before 20040810 allow remote authenticated attackers to cause a denial of service or execute arbitrary code...
CVE-2004-0554
Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service system crash, possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program...
security flaw
Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service system crash, possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program...
Important: Red Hat Security Advisory: kernel security update
Updated kernel packages for Red Hat Enterprise Linux 3 that fix security vulnerabilities are now available. The Linux kernel handles the basic functions of the operating system. A flaw was found in Linux kernel versions 2.4 and 2.6 for x86 and x8664 that allowed local users to cause a denial of...
Musicqueue 1.2 - SIGSEGV Signal Handler Insecure File Creation
Musicqueue 1.2 - SIGSEGV Signal Handler Insecure File Creation // source: https://www.securityfocus.com/bid/8899/info A vulnerability has been reported for Musicqueue. The problem specifically occurs within a signal handling procedure used invoked when a segmentation violation occurs. The procedu...
Musicqueue 1.2 - SIGSEGV Signal Handler Insecure File Creation
// source: https://www.securityfocus.com/bid/8899/info A vulnerability has been reported for Musicqueue. The problem specifically occurs within a signal handling procedure used invoked when a segmentation violation occurs. The procedure invokes a library function, passing it the name of a...