Advisories Blog | G5 Cyber Security

Computer Academic Underground Advisory 2004.2

imwheel version 1.0.0pre11 uses a predictably named PID file for management of multiple imwheel processes. A race condition exists when the -k command-line option is used to kill existing imwheel processes. This race condition may be used by a local user to Denial of Service another user using imwheel, lead to resource exhaustion of the host system, or append data to arbitrary files.

 

You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34110/CAU-2004-0002.txt

Source: https://packetstormsecurity.com/files/34110/Computer-Academic-Underground-Advisory-2004.2.html

Exit mobile version