CVE-2004-0368 Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.
HighCVSS 10.0
EPSS 10.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| open group cde common desktop environment | = 1.0.1 | No fix listed |
| open group cde common desktop environment | = 1.0.2 | No fix listed |
| open group cde common desktop environment | = 1.1 | No fix listed |
| open group cde common desktop environment | = 1.2 | No fix listed |
| open group cde common desktop environment | = 2.0 | No fix listed |
| open group cde common desktop environment | = 2.1 | No fix listed |
| open group cde common desktop environment | = 2.1.20 | No fix listed |
| xi graphics dextop | = 2.1 | No fix listed |
| xi graphics dextop | = 3.0 | No fix listed |
| ibm aix | = 4.3.3 | No fix listed |
| ibm aix | = 5.1 | No fix listed |
| ibm aix | = 5.2 | No fix listed |
References
- 20040323 how much fun can you have with UDP? mailing-list vendor-advisory
- [Dailydave] 20040323 dtlogin advisory mailing-list vendor-advisory
- 11210 third-party-advisory vendor-advisory
- 11214 third-party-advisory vendor-advisory
- 11495 third-party-advisory vendor-advisory
- 11614 third-party-advisory vendor-advisory
- 101478 vendor-advisory
- 57539 vendor-advisory
- HPSBUX01038 vendor-advisory
- O-129 government-resource third-party-advisory
- www.immunitysec.com
- VU#179804 third-party-advisory us-government-resource
- 9958 vdb-entry
- cde-dtlogin-double-free(15581) vdb-entry
- oval:org.mitre.oval:def:1436 signature vdb-entry