CVE-2002-0679 Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.
HighCVSS 10.0
EPSS 23.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| caldera unixware | = 7.0 | No fix listed |
| caldera unixware | = 7.1.0 | No fix listed |
| caldera unixware | = 7.1.1 | No fix listed |
| xi graphics dextop | = 2.1 | No fix listed |
| caldera openunix | = 8.0 | No fix listed |
| compaq tru64 | = 4.0f | No fix listed |
| compaq tru64 | = 4.0g | No fix listed |
| compaq tru64 | = 5.0a | No fix listed |
| compaq tru64 | = 5.1 | No fix listed |
| compaq tru64 | = 5.1a | No fix listed |
| HP Inc hp-ux | = 10.10 | No fix listed |
| HP Inc hp-ux | = 10.20 | No fix listed |
| HP Inc hp-ux | = 10.24 | No fix listed |
| HP Inc hp-ux | = 11.00 | No fix listed |
| HP Inc hp-ux | = 11.11 | No fix listed |
| ibm aix | = 4.3.3 | No fix listed |
| ibm aix | = 5.1 | No fix listed |
| sun solaris | = 2.6 | No fix listed |
| sun solaris | = 9.0 | No fix listed |
| sunos | = 5.5.1 | No fix listed |
| sunos | = 5.7 | No fix listed |
| sunos | = 5.8 | No fix listed |
References
- 20020812 ENTERCEPT RICOCHET ADVISORY: Multi-Vendor CDE ToolTalk Database mailing-list
- sunsolve.sun.com
- IY32792 vendor-advisory
- IY32793 vendor-advisory
- CA-2002-26 third-party-advisory us-government-resource
- tooltalk-ttdbserverd-ttcreatefile-bo(9822) vdb-entry
- VU#387387 patch third-party-advisory us-government-resource
- 5444 vdb-entry
- HPSBUX0207-199 vendor-advisory
- oval:org.mitre.oval:def:177 signature vdb-entry
- oval:org.mitre.oval:def:192 signature vdb-entry