CVE-2010-1123

Published: Mar 26, 2010Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Chip Salzenberg Deliver does not properly associate a lockfile with the user who created the file, which allows local users to cause a denial of service (blockage of incoming e-mail) by creating lockfiles for arbitrary mailboxes.

Affected (1)

Products: Chip Salzenberg: Deliver

Chip Salzenberg

1 product

Deliver

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Chip Salzenberg Deliver	Version 2.1.14

Related CWEs

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (6)

http://www.securityfocus.com/archive/1/510306/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/38924

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/57558

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/510306/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/38924

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/57558

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.