CWE-362 Archives - CVE Vulnerability

CVE-2008-6819

Sun, 26 Feb 2023 09:11:43 +0000

win32k.sys in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (system crash) via vectors related to CreateWindow, TranslateMessage, and DispatchMessage, possibly a race condition between threads, a different vulnerability than CVE-2008-1084. NOTE: some of these details are obtained from third party information.

The post CVE-2008-6819 appeared first on CVE Vulnerability.

CVE-2008-6598

Sun, 26 Feb 2023 09:11:36 +0000

Multiple race conditions in WANPIPE before 3.3.6 have unknown impact and attack vectors related to “bri restart logic.”

The post CVE-2008-6598 appeared first on CVE Vulnerability.

CVE-2008-5302

Sun, 26 Feb 2023 09:10:57 +0000

Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. It is different from CVE-2008-5303 due to affected versions.

The post CVE-2008-5302 appeared first on CVE Vulnerability.

CVE-2008-5303

Sun, 26 Feb 2023 09:10:57 +0000

Race condition in the rmtree function in File::Path 1.08 (lib/File/Path.pm) in Perl 5.8.8 allows local users to to delete arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. It is different from CVE-2008-5302 due to affected versions.

The post CVE-2008-5303 appeared first on CVE Vulnerability.

CVE-2008-5182

Sun, 26 Feb 2023 09:10:53 +0000

The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount.

The post CVE-2008-5182 appeared first on CVE Vulnerability.

CVE-2008-5044

Sun, 26 Feb 2023 09:10:50 +0000

Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (crash or hang) via a multi-threaded application that makes many calls to UnhookWindowsHookEx while certain other desktop activity is occurring.

The post CVE-2008-5044 appeared first on CVE Vulnerability.

CVE-2008-5009

Sun, 26 Feb 2023 09:10:49 +0000

Race condition in the s_xout kernel module in Sun Solstice X.25 9.2, when running on a multiple CPU machine, allows local users to cause a denial of service (panic) via vectors involving reading the /dev/xty file.

The post CVE-2008-5009 appeared first on CVE Vulnerability.

CVE-2008-4392

Sun, 26 Feb 2023 09:10:31 +0000

dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority (SOA) query.

The post CVE-2008-4392 appeared first on CVE Vulnerability.

CVE-2008-4307

Sun, 26 Feb 2023 09:10:28 +0000

Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL_POSIX lock, related to improper handling of a race between fcntl and close in the EINTR case.

The post CVE-2008-4307 appeared first on CVE Vulnerability.

CVE-2008-4229

Sun, 26 Feb 2023 09:10:27 +0000

Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through 2.1 allows physically proximate attackers to remove the lock and launch arbitrary applications by restoring the device from a backup.

The post CVE-2008-4229 appeared first on CVE Vulnerability.