CVE-2006-3118

CVE-2006-3118 describes a denial-of-service vulnerability in the 'spread' utility, specifically affecting canonical spread. The flaw arises from 'spread' using a temporary file with a predictable, static filename based on the port number. A local attacker can exploit a race condition between the 'unlink' and 'bind' function calls by pre-creating this temporary file, thereby preventing 'spread' from operating correctly. This vulnerability has a low CVSS score of 1.2 (AV:L/AC:H/Au:N/C:N/I:N/A:P), indicating a local attack vector with high attack complexity and only a partial impact on availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.