PT-2014-5313
CVE-2014-3426
·
Publicado
2014-05-08
·
Atualizado
2014-05-08
Descrição por
CVSS 2.0
2.1
BaixaMétricasAV:L/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
NCSA Mosaic versions 2.1 through 2.7b5
Description
The issue allows local users to cause a denial of service, also referred to as a "remote control" outage, by creating a /tmp/Mosaic.pid file for every possible PID.
Recommendations
For versions 2.1 through 2.7b5, consider restricting access to the /tmp directory to prevent the creation of multiple Mosaic.pid files as a temporary workaround.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾