dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates file.
The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.
Link | Tags |
---|---|
http://support.avaya.com/elmodocs2/security/ASA-2006-156.htm | third party advisory |
http://www.securityfocus.com/bid/5264 | broken link third party advisory vdb entry |
http://www.redhat.com/support/errata/RHSA-2005-583.html | vendor advisory broken link |
http://online.securityfocus.com/archive/1/283033 | broken link mailing list third party advisory vdb entry |
http://www.iss.net/security_center/static/9632.php | vdb entry broken link |
http://secunia.com/advisories/21520 | third party advisory broken link |