CVE-2006-3118

Publication date 30 June 2006

Last updated 24 July 2024


Ubuntu priority

spread uses a temporary file with a static filename based on the port number, which allows local users to cause a denial of service by creating the file during a race condition between unlink and bind function calls. NOTE: spread deletes this temporary file before use, which could cause conflicts with other programs that use the same filename, but this is not a distinct issue.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
spread 9.10 karmic
Fixed 3.17.3-4ubuntu1
9.04 jaunty
Fixed 3.17.3-4ubuntu1
8.10 intrepid
Fixed 3.17.3-4ubuntu1
8.04 LTS hardy
Fixed 3.17.3-4ubuntu1
7.10 gutsy
Fixed 3.17.3-4ubuntu1
7.04 feisty
Fixed 3.17.3-4ubuntu1
6.10 edgy
Fixed 3.17.3-4ubuntu1
6.06 LTS dapper Ignored end of life