CVE-2001-0772

The CVE-2001-0772 record concerns HP-UX systems with multiple CDE modules affected (HP-UX 10.10–11.11). The underlying issue is buffer overflows and related vulnerabilities in those modules, which the documents state can lead to a denial of service and may allow an attacker to gain additional pri...

Common Desktop Environment (CDE) ToolTalk RPC Server rpc.ttdbserverd contains format string vulnerability

Overview A vulnerability exists in CDE ToolTalk that may allow a remote attacker to execute arbitrary code with root privileges. Description Internet Security Systems ISS X-Force has discovered a format string vulnerability in the Common Desktop Environment CDE ToolTalk Remote Procedure Call RPC...

CVE-1999-1025

CDE screen lock program screenlock on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string...

CVE-1999-1025

The CVE-1999-1025 issue affects Solaris 2.6 where the CDE screen lock program (screenlock) fails to lock an unprivileged user’s console session when the host is an NIS+ client, enabling anyone with physical access to login using arbitrary strings. Affected component: CDE screenlock on Solaris 2.6...

CVE-2001-0551

Buffer overflow in CDE Print Viewer dtprintinfo allows local users to execute arbitrary code by copying text from the clipboard into the Help window...

SGI IRIX 6.5 / Solaris 7.0/8 CDE - '/usr/dt/bin/dtsession' Local Buffer Overflow

/ source: https://www.securityfocus.com/bid/2603/info The CDE Session Manager 'dtsession' is vulnerable to a buffer overflow that could yield root privileges to an attacker. The bug exists in dtsession's LANG environment variable parser. If an overly long LANG variable is set and dtsession is...

SGI IRIX 6.5 Solaris 7.08 CDE - usrdtbindtsession Local Buffer Overflow

SGI IRIX 6.5 Solaris 7.08 CDE - usrdtbindtsession Local Buffer Overflow / source: https://www.securityfocus.com/bid/2603/info The CDE Session Manager 'dtsession' is vulnerable to a buffer overflow that could yield root privileges to an attacker. The bug exists in dtsession's LANG environment...

CVE-1999-0696

Buffer overflow in CDE Calendar Manager Service Daemon rpc.cmsd...

CVE-1999-0696

CVE-1999-0696 concerns a buffer overflow in the Calendar Manager Service Daemon (rpc.cmsd) of the CDE Calendar Manager. The vulnerability is described as a buffer overflow (root cause) that could impact the service’s confidentiality, integrity, and availability (CVSS 2.0 base score 10.0, network ...

CVE-1999-0841

CVE-1999-0841 affects the CDE mailtool component. The vulnerability is a buffer overflow triggered by a long MIME Content-Type, enabling local users to gain root privileges. The available documents do not specify affected versions, exact root-cause details beyond the overflow, or any remediation/...

CVE-1999-0840

CVE-1999-0840 affects CDE dtmail and dtmailpr; the description indicates a buffer overflow caused by a long -f option, enabling local users to gain privileges. The provided data do not specify affected versions, root cause code paths, or explicit remediation steps. Exploitation details or in-the-...

CVE-1999-0841

Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type...

CVE-1999-0690

HP CDE program includes the current directory in root's PATH variable...

CVE-1999-0689

The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack...

CVE-1999-0691

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name...

CVE-1999-0690

Technical details about CVE-1999-0690 are not publicly provided in the supplied documents; monitor for updates.

CVE-1999-0691

CVE-1999-0691 : A buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name. This is corroborated by Red Hat’s security entry and other references; no exploit details or patches are provided in the available documents. The...

CVE-1999-0689

The CVE-1999-0689 entries describe a vulnerability in the CDE dtspcd daemon where local users can trigger arbitrary command execution through a symlink attack. The connected Red Hat and CVE records repeat the same description. The sources do not provide specific affected versions, vendor/product ...

CDE Subprocess Control Service (dtspcd) Detection

The 'dtspcd' service is running. This service deals with the CDE interface for the X11 system. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10833; scriptversion"$Revision: 1.25 $"; scriptcvsdate"$Date: 2011/03/11 21:52:32 $"; scriptnameenglish:"CDE Subprocess Contro...

CVE-1999-0841

Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type...