9 matches found
CVE-1999-0003
Execute commands as root via buffer overflow in Tooltalk database server rpc.ttdbserverd...
SUSE CVE-1999-0003
Execute commands as root via buffer overflow in Tooltalk database server rpc.ttdbserverd...
ToolTalk rpc.ttdbserverd Database Parser Heap Overflow (CVE-2010-0083)
ToolTalk is a communications system developed by Sun Microsystems in order to allow applications to communicate with each other at runtime. A heap overflow vulnerability has been discovered in the ToolTalk database server. The vulnerability is located within a function of the ToolTalk database...
Solaris KCMS + TTDB Arbitrary File Read
This module targets a directory traversal vulnerability in the kcmsserver component from the Kodak Color Management System. By utilizing the ToolTalk Database Server's TTISBUILD procedure, an attacker can bypass existing directory traversal validation and read arbitrary files. Vulnerable systems...
ToolTalk rpc.ttdbserverd _tt_internal_realpath Buffer Overflow (AIX)
This module exploits a buffer overflow vulnerability in ttinternalrealpath function of the ToolTalk database server rpc.ttdbserverd. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ToolTalk...
CVE-2002-0677
CDE ToolTalk database server ttdbserver allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTHUNIX procedure call, which is used as a table index by the TTISCLOSE procedure...
CVE-2001-0717
Format string vulnerability in ToolTalk database server rpc.ttdbserverd allows remote attackers to execute arbitrary commands via format string specifiers that are passed to the syslog function...
CVE-1999-0003
Execute commands as root via buffer overflow in Tooltalk database server rpc.ttdbserverd...
CVE-1999-0003
CVE-1999-0003: A buffer overflow in the ToolTalk database server (rpc.ttdbserverd) may allow an attacker to execute arbitrary commands as root. Affected component is ToolTalk’s object database server; exploitation would require access to the vulnerable service. In the provided references, the imp...