Advisory CA-2002-20 Multiple Vulnerabilities in CDE ToolTalk

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2002-20 Multiple Vulnerabilities in CDE ToolTalk Original release date: July 10, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Systems running CDE ToolTalk Overview Two...

Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) does not adequately validate file descriptor arguement to _TT_ISCLOSE()

Overview The Common Desktop Environment CDE ToolTalk RPC database server does not adequately validate a client-supplied argument, allowing attackers to overwrite certain locations in memory with zeros. This vulnerability could be exploited in a number of ways, potentially allowing attackers to:...

Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) does not adequately validate file operations

Overview The Common Desktop Environment CDE ToolTalk RPC database server does not adequately validate file operations and follows symbolic links, allowing a local attacker to overwrite any file that is writeable by the server. The ToolTalk RPC database server typically runs with root privileges...

eSecurityOnline Security Advisory 2406 - CDE dtprintinfo Help sea rch buffer overflow vulnerability

eSO Security Advisory: 2406 Discovery Date: March 31, 2000 ID: eSO:2406 Title: CDE dtprintinfo Help search buffer overflow vulnerability Impact: Local attackers can gain root level access Affected Technology: Solaris 2.4, 2.5, 2.5.1, 2.6, 7, 8 SPARC and x86 HP-UX 10.10, 10.20, 10.24, 11.00, 11.04...

Buffer overflow in CDE dtprintinfo

Buffer overflow in HELP subsistem...

CVE-2002-0105

CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable...

CVE-2001-0803

CVE-2001-0803 is a buffer overflow in the dtspcd (CDE Subprocess Control Service) client connection routine (libDtSvc.so.1) that allows remote execution of arbitrary commands. Public references show exploits and proof-of-concept tooling (e.g., Solaris dtspcd heap overflow modules in Metasploit) a...

CVE-2001-0551

CVE-2001-0551 corresponds to a buffer overflow in the CDE Print Viewer (dtprintinfo) that enables a local attacker to execute arbitrary code, potentially as root, by overflowing the Help window search field via the clipboard. Connected advisories confirm impact on multiple platforms (Solaris 2.4–...

CVE-2001-0551

Buffer overflow in CDE Print Viewer dtprintinfo allows local users to execute arbitrary code by copying text from the clipboard into the Help window...

Символьные линки в CDE dtlogin (symbolic links)

Создается файл /var/dt/Xerrors без проверки симваольных линков...

CVE-2001-1577

Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused...

CDE dtprintinfo contains local buffer overflow in Help window via clipboard copy

Overview The CDE Print Viewer program dtprintinfo provides a graphical interface display the status of print queues and print jobs. By using the clipboard to overflow the search field in the Help window of dtprintinfo, a local attacker can execute arbitrary code on the system as root. Description...

Проблемы в CDE с сохраненными сеансами xterm (privelege escalation)

No description provided...

CVE-2001-0803

Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service dtspcd allows remote attackers to execute arbitrary commands...

ISS Security Advisory: Multi-Vendor Buffer Overflow Vulnerability in CDE Subprocess Control Service

Internet Security Systems Security Advisory November 12, 2001 Multi-Vendor Buffer Overflow Vulnerability in CDE Subprocess Control Service Synopsis: Internet Security Systems ISS X-Force has discovered a buffer overflow in the Subprocess Control Server dtspcd in all Unix variants running CDE Comm...

Advisory CA-2001-31 Buffer Overflow in CDE Subprocess Control Service

CERT Advisory CA-2001-31 Buffer Overflow in CDE Subprocess Control Service Original release date: November 12, 2001 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Systems running CDE Overview There is a remotely exploitable buff...

Переполнение буфера в CDE dt-утилитах - libdtsvc (buffer overflow)

Переполнения буфера в suid/sgid приложениях...

Buffer oveflow vulnerability in CDE DtSvc library

IBM SECURITY ADVISORY Mon Oct 29 09:15:39 CST 2001 =========================================================================== VULNERABILITY SUMMARY VULNERABILITY: Buffer oveflow vulnerability in CDE DtSvc library PLATFORMS: IBM AIX 4.3 and 5.1 SOLUTION: Apply the emergency-fixes described below...

CVE-2001-0772

The CVE-2001-0772 record concerns HP-UX systems with multiple CDE modules affected (HP-UX 10.10–11.11). The underlying issue is buffer overflows and related vulnerabilities in those modules, which the documents state can lead to a denial of service and may allow an attacker to gain additional pri...

Common Desktop Environment (CDE) ToolTalk RPC Server rpc.ttdbserverd contains format string vulnerability

Overview A vulnerability exists in CDE ToolTalk that may allow a remote attacker to execute arbitrary code with root privileges. Description Internet Security Systems ISS X-Force has discovered a format string vulnerability in the Common Desktop Environment CDE ToolTalk Remote Procedure Call RPC...