CVE-2001-0803 Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.
HighCVSS 10.0
EPSS 85.6%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| open group cde common desktop environment | = 1.0.1 | No fix listed |
| open group cde common desktop environment | = 1.0.2 | No fix listed |
| open group cde common desktop environment | = 1.1 | No fix listed |
| open group cde common desktop environment | = 1.2 | No fix listed |
| open group cde common desktop environment | = 2.0 | No fix listed |
| open group cde common desktop environment | = 2.1 | No fix listed |
References
- SSRT541 vendor-advisory
- 00214 vendor-advisory
- CA-2001-31 third-party-advisory us-government-resource
- CA-2002-01 third-party-advisory us-government-resource
- VU#172583 patch third-party-advisory us-government-resource
- HPSBUX0111-175 patch vendor-advisory
- 3517 patch vdb-entry vendor-advisory
- 20011112 Multi-Vendor Buffer Overflow Vulnerability in CDE Subprocess Control Service third-party-advisory vendor-advisory
- cde-dtspcd-bo(7396) vdb-entry
- oval:org.mitre.oval:def:70 signature vdb-entry
- oval:org.mitre.oval:def:74 signature vdb-entry