CVE-2003-0834 Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAM...
HighCVSS 7.2
EPSS 1.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sco open unix | = 8.0 | No fix listed |
| sco unixware | = 7.1.1 | No fix listed |
| sco unixware | = 7.1.3 | No fix listed |
References
- HPSBUX0311-297 vendor-advisory
- 57414 vendor-advisory
- 20040825 CDE libDtHelp LOGNAME Buffer Overflow Vulnerability third-party-advisory
- VU#575804 patch third-party-advisory us-government-resource
- 8973 patch vdb-entry vendor-advisory
- oval:org.mitre.oval:def:5141 signature vdb-entry