490 matches found
CVE-1999-0689
The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack...
CVE-1999-0691
Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name...
CVE-1999-0691
CVE-1999-0691 : A buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name. This is corroborated by Red Hat’s security entry and other references; no exploit details or patches are provided in the available documents. The...
CVE-1999-0690
Technical details about CVE-1999-0690 are not publicly provided in the supplied documents; monitor for updates.
CVE-1999-0689: Undefined Security Weakness
The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack...
CVE-1999-0691: Undefined Security Weakness
Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name...
CVE-1999-0690: Undefined Security Weakness
HP CDE program includes the current directory in root's PATH variable...
CDE Subprocess Control Service (dtspcd) Detection
The 'dtspcd' service is running. This service deals with the CDE interface for the X11 system. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10833; scriptversion"$Revision: 1.25 $"; scriptcvsdate"$Date: 2011/03/11 21:52:32 $"; scriptnameenglish:"CDE Subprocess Contro...
CVE-1999-0840
Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option...
CVE-1999-0841
Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type...
Solaris 7.0 - CDE dtmailmailtool Buffer Overflow
Solaris 7.0 - CDE dtmailmailtool Buffer Overflow // source: https://www.securityfocus.com/bid/832/info here are three buffer overflow vulnerabilities in the CDE mail utilities, all of which are installed sgid mail by default. The first is exploited through overrunning a buffer in the Content-Type...
Solaris 7.0 - CDE dtmail/mailtool Buffer Overflow
// source: https://www.securityfocus.com/bid/832/info here are three buffer overflow vulnerabilities in the CDE mail utilities, all of which are installed sgid mail by default. The first is exploited through overrunning a buffer in the Content-Type: field, which would look something like this:...
CVE-1999-0014
CVE-1999-0014 affects the dtappgather component of CDE. The connected records consistently describe the issue as enabling unauthorized privileged access or denial of service via dtappgather. The available documents do not provide specifics on affected products, versions, root cause details, explo...
CVE-1999-0112
CVE-1999-0112 describes a buffer overflow in the AIX dtterm program used by the CDE. Affected: AIX dtterm (CDE component). Root cause: buffer overflow. Impact: CVSS v2 base score 7.2; impacts confidentiality, integrity, and availability; exploit is local with no authentication and no user interac...
CVE-1999-0014: Undefined Security Weakness
Unauthorized privileged access or denial of service via dtappgather program in CDE...
CVE-1999-0112: Undefined Security Weakness
Buffer overflow in AIX dtterm program for the CDE...
dtaction.digital.unix.vuln.txt
Zack Hubert [email protected] Sent: Thursday, September 16, 1999 12:39 PM Subject: Vulnerability in dtaction on Digital Unix I have verified that the dtaction vulnerability in CDE can be exploited for local root compromise on Digital Unix systems. Background -------------- This is a followup to th...
ttsession_vuln.txt
Subject: Vulnerability in ttsession To: [email protected] Hello, I discovered the following security problem in ttsession, part of CDE: Description ----------- The ToolTalk session daemon ttsession does not properly check client credentials. Impact ------ The insufficient check can lead t...
dtspcd_vuln.txt
Subject: Vulnerability in dtspcd To: [email protected] Hello, I discovered the following security problem in dtspcd, part of CDE: Description ----------- The CDE subprocess daemon /usr/dt/bin/dtspcd contains an insufficient check on client credentials. Impact ------ The insufficient check...