Procmail Unsafe Signal Handling Race Condition Vulnerability

Bugtraq ID: 3071
Class: Atomicity Error
CVE:
Remote: No
Local: Yes
Published: Jul 18 2001 12:00AM
Updated: Jul 18 2001 12:00AM
Credit: Published in a Red Hat Security Advisory on July 19, 2001.
Vulnerable: Procmail Procmail 3.20
+ Mandriva Linux Mandrake 8.1
Procmail Procmail 3.15
- Debian Linux 2.2 sparc
- Debian Linux 2.2 powerpc
- Debian Linux 2.2 arm
- Debian Linux 2.2 alpha
- Debian Linux 2.2 68k
- Debian Linux 2.2
- FreeBSD FreeBSD 4.3
- FreeBSD FreeBSD 4.2
- FreeBSD FreeBSD 4.1.1
- FreeBSD FreeBSD 3.5.1
+ MandrakeSoft Corporate Server 1.0.1
+ MandrakeSoft Single Network Firewall 7.2
+ Mandriva Linux Mandrake 8.0 ppc
+ Mandriva Linux Mandrake 8.0
+ Mandriva Linux Mandrake 7.2
+ Mandriva Linux Mandrake 7.1
Procmail Procmail 3.14
+ Red Hat Linux 6.2
+ RedHat Linux 7.1
+ RedHat Linux 7.0
Procmail Procmail 3.13
Procmail Procmail 3.11
Procmail Procmail 3.10
+ RedHat Linux 5.2
Not Vulnerable: Procmail Procmail 3.22
+ Mandriva Linux Mandrake 8.1
Procmail Procmail 3.21
- Apple Mac OS X 10.1
- FreeBSD FreeBSD 4.4


 

Privacy Statement
Copyright 2010, SecurityFocus