CVE

Id
26457  
CVE No.
CVE-2007-3100  
Status
Candidate  
Description
usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with insecure permissions (world-writable/world-readable) for managing log messages using shared memory, which allows local users to cause a denial of service (hang) by grabbing the semaphore.  
Phase
Assigned (20070607)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
268255 26457 CVE-2007-3100 CONFIRM:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=243719  View
268256 26457 CVE-2007-3100 CONFIRM:http://svn.berlios.de/viewcvs/open-iscsi?rev=858&view=rev  View
268257 26457 CVE-2007-3100 CONFIRM:http://support.novell.com/techcenter/psdb/187174044e1dbe78726bcf840f7530ed.html  View
268258 26457 CVE-2007-3100 DEBIAN:DSA-1314  View
268259 26457 CVE-2007-3100 URL:http://www.debian.org/security/2007/dsa-1314  View
268260 26457 CVE-2007-3100 REDHAT:RHSA-2007:0497  View
268261 26457 CVE-2007-3100 URL:http://www.redhat.com/support/errata/RHSA-2007-0497.html  View
268262 26457 CVE-2007-3100 SUSE:SUSE-SR:2007:017  View
268263 26457 CVE-2007-3100 URL:http://www.novell.com/linux/security/advisories/2007_17_sr.html  View
268264 26457 CVE-2007-3100 BID:24471  View
268265 26457 CVE-2007-3100 URL:http://www.securityfocus.com/bid/24471  View
268266 26457 CVE-2007-3100 OSVDB:37270  View
268267 26457 CVE-2007-3100 URL:http://osvdb.org/37270  View
268268 26457 CVE-2007-3100 OVAL:oval:org.mitre.oval:def:10653  View
268269 26457 CVE-2007-3100 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10653  View
268270 26457 CVE-2007-3100 SECTRACK:1018246  View
268271 26457 CVE-2007-3100 URL:http://www.securitytracker.com/id?1018246  View
268272 26457 CVE-2007-3100 SECUNIA:25679  View
268273 26457 CVE-2007-3100 URL:http://secunia.com/advisories/25679  View
268274 26457 CVE-2007-3100 SECUNIA:25749  View
268275 26457 CVE-2007-3100 URL:http://secunia.com/advisories/25749  View
268276 26457 CVE-2007-3100 SECUNIA:26438  View
268277 26457 CVE-2007-3100 URL:http://secunia.com/advisories/26438  View
268278 26457 CVE-2007-3100 SECUNIA:26543  View
268279 26457 CVE-2007-3100 URL:http://secunia.com/advisories/26543  View
268280 26457 CVE-2007-3100 XF:openiscsi-log-dos(34943)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52136 JVNDB-2007-000799 OpenSSH の linux_audit_record_event() 関数における監査ログに不正な文字を埋め込まれる問題 OpenSSH には linux_audit_record_event() 関数に不備があり、細工された username によって、監査ログに任意の文字列を書き込まれる問題が存在します。 CVE-2007-3102 26457 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000799.html  View