CVE-2002-0678 CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.
HighCVSS 7.2
EPSS 9.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| caldera unixware | = 7.0 | No fix listed |
| caldera unixware | = 7.1.0 | No fix listed |
| caldera unixware | = 7.1.1 | No fix listed |
| xi graphics dextop | = 2.1 | No fix listed |
| sgi irix | = 5.2 | No fix listed |
| sgi irix | = 5.3 | No fix listed |
| sgi irix | = 6.0 | No fix listed |
| sgi irix | = 6.0.1 | No fix listed |
| sgi irix | = 6.1 | No fix listed |
| sgi irix | = 6.2 | No fix listed |
| sgi irix | = 6.3 | No fix listed |
| sgi irix | = 6.4 | No fix listed |
| sgi irix | = 6.5 | No fix listed |
| sgi irix | = 6.5.1 | No fix listed |
| sgi irix | = 6.5.2 | No fix listed |
| sgi irix | = 6.5.3 | No fix listed |
| sgi irix | = 6.5.4 | No fix listed |
| sgi irix | = 6.5.5 | No fix listed |
| sgi irix | = 6.5.6 | No fix listed |
| sgi irix | = 6.5.7 | No fix listed |
| sgi irix | = 6.5.8 | No fix listed |
| sgi irix | = 6.5.9 | No fix listed |
| sgi irix | = 6.5.10 | No fix listed |
| sgi irix | = 6.5.11 | No fix listed |
| sgi irix | = 6.5.12 | No fix listed |
Show 22 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sgi irix | = 6.5.13 | No fix listed |
| sgi irix | = 6.5.14 | No fix listed |
| sgi irix | = 6.5.15 | No fix listed |
| sgi irix | = 6.5.16 | No fix listed |
| caldera openunix | = 8.0 | No fix listed |
| compaq tru64 | = 4.0f | No fix listed |
| compaq tru64 | = 4.0g | No fix listed |
| compaq tru64 | = 5.0a | No fix listed |
| compaq tru64 | = 5.1 | No fix listed |
| compaq tru64 | = 5.1a | No fix listed |
| HP Inc hp-ux | = 10.10 | No fix listed |
| HP Inc hp-ux | = 10.20 | No fix listed |
| HP Inc hp-ux | = 10.24 | No fix listed |
| HP Inc hp-ux | = 11.00 | No fix listed |
| HP Inc hp-ux | = 11.11 | No fix listed |
| ibm aix | = 4.3.3 | No fix listed |
| ibm aix | = 5.1 | No fix listed |
| sun solaris | = 2.6 | No fix listed |
| sun solaris | = 9.0 | No fix listed |
| sunos | = 5.5.1 | No fix listed |
| sunos | = 5.7 | No fix listed |
| sunos | = 5.8 | No fix listed |
References
- IY32368 vendor-advisory
- 20020710 [CORE-20020528] Multiple vulnerabilities in ToolTalk Database server mailing-list
- CA-2002-20 patch third-party-advisory us-government-resource
- tooltalk-ttdbserverd-tttransaction-symlink(9527) vdb-entry
- VU#299816 patch third-party-advisory us-government-resource
- 5083 vdb-entry
- HPSBUX0207-199 vendor-advisory
- oval:org.mitre.oval:def:175 signature vdb-entry
- oval:org.mitre.oval:def:2770 signature vdb-entry
- oval:org.mitre.oval:def:80 signature vdb-entry