race condition vulnerabilities and exploits

(subscribe to this query)

641

VMScore

The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely. A malicious local user could create a symlink in /tmp and possibly clobber system files or perhaps elevate privileges.

Teradata Studio Express 15.12.00.00

625

VMScore

Race condition in the installation script for Tarantella Enterprise 3 3.01 up to and including 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it i...

Tarantella Tarantella Enterprise 3.3.10 Tarantella Tarantella Enterprise 3.3.11 Tarantella Tarantella Enterprise 3.3.20 Tarantella Tarantella Enterprise 3.3.0.1 Tarantella Tarantella Enterprise 3.3.0

1 EDB exploit

695

VMScore

Race condition in the Pipe (IPC) close function in FreeBSD 6.3 and 6.4 allows local users to cause a denial of service (crash) or gain privileges via vectors related to kqueues, which triggers a use after free, leading to a NULL pointer dereference or memory corruption.

Freebsd Freebsd 6.3 Freebsd Freebsd 6.4

1 EDB exploit

375

VMScore

Lmail 2.7 and previous versions allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

Jon Zeeff Lmail 2.7

1 EDB exploit

685

VMScore

Race condition in the kernel in Microsoft Windows XP SP3 allows local users to gain privileges via vectors involving thread creation, aka "Windows Kernel Data Initialization Vulnerability."

Microsoft Windows Xp

1 EDB exploit

515

VMScore

Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote malicious users to execute arbitrary code via a malicious web page or HTML e-mail, aka "DHTML Object Memory Corruption Vulnerability&q...

Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 6.0 Microsoft Ie 6.0 Microsoft Internet Explorer 5.5

1 EDB exploit

454

VMScore

Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 prior to 1.5.0.5, Thunderbird prior to 1.5.0.5, and SeaMonkey prior to 1.0.3 might allow remote malicious users to execute arbitrary code by causing the garbage collector to delete a temporary variable whi...

Mozilla Firefox 1.5.0.3 Mozilla Firefox 1.5.0.4 Mozilla Thunderbird 1.5.0.4 Mozilla Firefox 1.5.0.1 Mozilla Firefox 1.5.0.2 Mozilla Thunderbird 1.5 Mozilla Thunderbird 1.5.0.2 Mozilla Firefox 1.5 Mozilla Seamonkey 1.0.2 Mozilla Seamonkey 1.0 Mozilla Seamonkey 1.0.1

605

VMScore

Razer Chroma SDK Rest Server up to and including 3.12.17 allows remote malicious users to execute arbitrary programs because there is a race condition in which a file created under "%PROGRAMDATA%\Razer Chroma\SDK\Apps" can be replaced before it is executed by the server...

Razer Chroma Sdk

625

VMScore

Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local malicious users to gain root privileges by modifying the files before the permissions are changed.

Sap Sap Db 7.4.3.7 Beta Sap Sap Db 7.3.29

1 EDB exploit

NA

CyberArk's Credential Provider loopback communications on TCP port 18923 are encrypted with key material that has extremely low entropy. In all currently-known use cases, the effective key space is less than 2^16. For an attacker who understands the key derivation scheme and...

Get Started

« PREV 1 2 3 4 5 6 7 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook