Vulnerability in Canonical Spread
CVE-2006-3118
spread uses a temporary file with a static filename based on the port number, which allows local users to cause a denial of service by creating the file during a race condition between unlink and bind function calls. NOTE: spread deletes this temporary file before use, which could cause conflicts with other programs that use the same filename, but this is not a distinct issue.
EPSS: 0.003 (22.7th percentile) — read the EPSS interpretation.
Affected products
- Canonical Spread
- N/a — versions n/a
References
- security@debian.org (x_refsource_MISC)
- security@debian.org (vdb-entry, x_refsource_BID)
- security@debian.org (x_refsource_CONFIRM)