PT-2006-4016 · Spread · Spread

Nodata · Publicado 2006-06-30 · Atualizado 2008-09-05 · CVE-2006-3118

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Baixa

Vetor base

AV:L/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions spread (affected versions not specified)

Description The issue allows local users to cause a denial of service by exploiting a race condition between unlink and bind function calls. This occurs because spread uses a temporary file with a static filename based on the port number. Additionally, spread deletes this temporary file before use, which could potentially cause conflicts with other programs using the same filename.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-3118

Produtos afetados

Spread

Referências · 4

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375617 · Nota
• http://securityfocus.com/bid/18675 · Nota
• https://launchpad.net/distros/ubuntu/+source/spread/+bug/44171 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3118 · Nota de Segurança