PT-2006-4016 · Spread · Spread

Nodata · Published 2006-06-30 · Updated 2008-09-05 · CVE-2006-3118

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Low

Base vector

AV:L/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions spread (affected versions not specified)

Description The issue allows local users to cause a denial of service by exploiting a race condition between unlink and bind function calls. This occurs because spread uses a temporary file with a static filename based on the port number. Additionally, spread deletes this temporary file before use, which could potentially cause conflicts with other programs using the same filename.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-3118

Affected Products

Spread

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-3118 · Security Note
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375617 · Note
• http://securityfocus.com/bid/18675 · Note
• https://launchpad.net/distros/ubuntu/+source/spread/+bug/44171 · Note