PT-2002-1027 · Dump · Dump

Published 2002-12-31 · Updated 2024-02-08 · CVE-2002-1914

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions dump versions 0.4 b10 through 0.4 b29

Description The issue allows local users to cause a denial of service, preventing execution, by using the flock() function to lock the /etc/dumpdates file. This can lead to a disruption in the availability of protected information. The exploitation of this issue can be carried out locally.

Recommendations For dump versions 0.4 b10 through 0.4 b29, consider restricting access to the /etc/dumpdates file to prevent the flock() function from locking it, until a patch is available. As a temporary workaround, avoid using the flock() function to lock the /etc/dumpdates file.

Fix

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

BDU:2015-06667

BDU:2015-06671

CVE-2002-1914

Affected Products

Dump

References · 14

• https://bdu.fstec.ru/vul/2015-06671 · Security Note
• https://bdu.fstec.ru/vul/2015-06667 · Security Note
• http://redhat.com/support/errata/RHSA-2005-583.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1914 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2002-1914 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2002-1914 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1914 · Security Note
• http://iss.net/security_center/static/9632.php · Note
• http://online.securityfocus.com/archive/1/283033 · Note
• https://rhn.redhat.com/errata/RHSA-2005-583.html · Note
• https://t.me/cvenotify/70636 · Telegram Post
• http://support.avaya.com/elmodocs2/security/ASA-2006-156.htm · Note
• http://secunia.com/advisories/21520 · Note
• http://securityfocus.com/bid/5264 · Note