CVE-2001-0717 Format string vulnerability in ToolTalk database server rpc.ttdbserverd allows remote attackers to execute arbitrary commands via format string specifiers that are passed to the syslog function.
HighCVSS 10.0
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in ToolTalk database server rpc.ttdbserverd allows remote attackers to execute arbitrary commands via format string specifiers that are passed to the syslog function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tooltalk database server | All versions | No fix listed |
References
- SSRT0767U vendor-advisory
- HPSBUX0110-168 vendor-advisory
- 1002479 vdb-entry
- 00212 vendor-advisory
- CA-2001-27 third-party-advisory us-government-resource
- M-002 government-resource third-party-advisory
- 3382 vdb-entry
- 20011002 Multi-Vendor Format String Vulnerability in ToolTalk Service patch third-party-advisory vendor-advisory
- tooltalk-ttdbserverd-format-string(7069) vdb-entry